CWE-353.

ast-cli: Auto-update downloads are not verified against a checksum before execution

• github.com/checkmarx/ast-cli
• CWE-353

The issue was addressed with additional app bundle integrity checks.

• Apple macOS
• CWE-353

Unauthenticated Missing Integrity Verification allows Remote Code Execution in ClearPass Policy Manager Client Agent

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• CWE-353

Missing Integrity Verification in the OnGuard Agent of ClearPass Policy Manager Allows Unauthenticated Remote Code Execution

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• CWE-353

Joplin desktop Windows auto-updater accepts signed installer from any publisher because app-update.yml has no publisherName

• laurent22 joplin
• CWE-345
• CWE-353

Netcore NR268 1.7.121109 Security Check Bypass in parame_put_file.cgi

• Netcore NR268
• CWE-353

A cryptographic issue was addressed with improved integrity checks.

• Apple iOS and iPadOS
• Apple macOS
• CWE-353

Howyar｜WeenyGenius - Missing Support for Integrity Check

• Howyar WeenyGenius
• CWE-353

Dell ThinOS 10: Dell ThinOS 10, versions prior to 2605_10.2616…

• Dell ThinOS 10
• CWE-353

Samba: ctdb fails to do integrity checking of received packets

• Red Hat Ceph Storage 9.2
• Red Hat Enterprise Linux 10
• CWE-353

Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check

• Thermo Fisher Applied Biosystems 3500/3500xL Series Data Collection Software
• Thermo Fisher Applied Biosystems 3730/3730xL Series Data Collection Software
• CWE-353

Data::Entropy versions before 0.010 for Perl read remote entropy sources over plain HTTP

• RRWO Data::Entropy
• Weak cryptography or TLS
• CWE-353

Integrity mechanism of KNX-device FW-files can be bypassed in ABB Update Tool

• KNX Update Tool (ABB)
• ABB KNX Update Tool (BJE)
• CWE-353

pnpm: Tarball hash of GitHub git dependencies is not stored in lockfile

• CWE-353

<10.33.4 || >=11.0.0, <11.0.7 · fixed in 10.33.4, 11.0.7

Anthropic Claude Desktop Cowork VM Image Contents Not Validated Before Use

• Anthropic Claude Desktop Cowork
• CWE-353

PHP JWT Framework: Chacha20Poly1305 key-encryption algorithm discards the Poly1305 authentication tag, performing no authentication on decryption

• Weak cryptography or TLS
• CWE-353

<=4.1.6 · no fixed version yet

electerm's encrypt method not safe enough

• Weak cryptography or TLS
• CWE-329

<3.9.5 · fixed in 3.9.5

Null pointer accces in aggressive NSEC(3) cache

• PowerDNS Recursor
• CWE-353

OpenClaw B-M3: ClawHub package downloads are not enforced with integrity verification

• CWE-353

<2026.4.8 · fixed in 2026.4.8

IBM Db2 Recovery Expert Missing Integrity Check

• IBM Db2 Recovery Expert
• CWE-353

Striae has a hash validation utility vulnerability

• Weak cryptography or TLS
• CWE-353

>=0.9.22-0, <3.0.0 · fixed in 3.0.0

Integrity Validation Bypass in CryptoPro Secure Disk for BitLocker

• CPSD IT SERVICES GMBH CryptoPro Secure Disk for BitLocker
• CWE-353

Download Manager <= 3.3.40 - Unauthenticated Limited Privilege Escalation via updatePassword

• codename065 Download Manager
• CWE-353

eopkg vulnerable to package file list integrity bypass

• getsolus eopkg
• CWE-353

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlle…

• Cross-site request forgery (CSRF)
• CWE-353

Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root during integrity validation.

• CWE-353

BIG-IP APM VPN web client for macOS vulnerability

• F5 BIG-IP Edge Client
• F5 BIG-IP
• CWE-353

Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-353

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-353

An issue was discovered on goTenna Mesh devices with app 5.5.3 and firmware 1.1.12.

• CWE-353

An issue was discovered on goTenna v1 devices with app 5.5.3 and firmware 0.25.5.

• CWE-353

goTenna Pro ATAK Plugin Missing Support for Integrity Check

• goTenna Pro ATAK Plugin
• CWE-353

Missing Support for Integrity Check in goTenna Pro

• goTenna Pro
• CWE-353

Diebold Nixdorf Vynamic Security Suite (VSS) before 3.3.0 SR15, 4.0.0 SR05, 4.1.0 SR03, and 4.2.0 SR02 fails to validate the directory contents of certain directories (e.g., ensuring the expected has…

• CWE-353

The issue was addressed with improved checks.

• Apple iOS and iPadOS
• Apple macOS
• CWE-353

Dell BIOS contains a missing support for integrity check vulnerability.

• Dell CPG BIOS
• CWE-353

Ciphertext Malleability in TETRA

• ETSI TETRA Standard
• CWE-353

Magento Open Source allows Incorrect Authorization

• CWE-353

>=2.4.4-p1, <2.4.4-p4 || >=2.4.5-p1, <2.4.5-p3 · fixed in 2.4.4-p4, 2.4.5-p3

Emerson Electric Proficy Machine Edition: Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to…

• Emerson Electric Proficy Machine Edition
• CWE-353

4NB VideoOffice: An arbitrary file download and execution vulnerability was found in the VideoOffice X2.9…

• 4NB VideoOffice
• CWE-353

godomall5 remote code execution vulnerability

• NHN COMMERCE godomall5 Std, godomall5 Pro
• CWE-353

Missing Support Integrity Check for Boston Scientific Zoom Latitude

• Boston Scientific ZOOM LATITUDE
• CWE-353

handysoft groupware arbitrary file download and execution vulnerability

• handysoft HShell.dll
• CWE-353

Acrobat Reader DC Missing Support for Integrity Check

• Adobe Acrobat Reader
• CWE-353

Acrobat Reader DC Missing Support for Integrity Check

• Adobe Acrobat Reader
• CWE-353

DLL Hijacking Vulnerabilities During Installation of LG Electronics Software

• LG Electronics (LGPCSuite_Setup), (IPSFULLHD, LG_ULTRAWIDE, ULTRA_HD_Driver Setup)
• CWE-353

Missing authentication in Diebold Nixdorf ProCash 2100xe USB ATM

• Diebold Nixdorf ProCash 2100xe USB ATM
• Authentication bypass
• Weak cryptography or TLS

Missing authentication in NCR SelfServ ATM

• NCR SelfServ ATM
• Authentication bypass
• Weak cryptography or TLS

HandySoft ActiveX File Download and Execution Vulnerability

• Handysoft, Inc. hslogin2.dll
• CWE-353

Cabsoftware Reportexpress ProPlus: Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code…

• Cabsoftware Reportexpress ProPlus
• CWE-353

RAONWIZ Inc K Upload, arguments modiffication via missing support for integrity check vulnerability

• RAONWIZ Inc K Upload
• Command injection
• CWE-353

Ubuntu kernel snap build process could use unauthenticated sources

• Canonical pc-kernel
• CWE-353

RVD#1487: No integrity checks on UR+ platform artifacts when installed in the robot

• Universal Robots URx
• CWE-353

Siemens SIMATIC Drive Controller family: A vulnerability has been identified in SIMATIC Drive Controller family (All versions)…

• Siemens SIMATIC Drive Controller family
• Siemens SIMATIC ET 200SP Open Controller CPU 1515SP PC (incl. SIPLUS variants)
• CWE-353

Hunesion i-oneNet Missing Support for Integrity Check vulnerability

• Hunesion i-oneNet
• CWE-353