# CWE-494. Every Advisory and CVE whose sources give the weakness CWE-494, newest first. ## Records, newest first (an older page) - [Download of code without integrity check in Fortinet FortiOS](https://agentprime.io/advisories/CVE-2021-44168.md) `CVE-2021-44168` · CVE record: Fortinet Fortinet FortiOS · CVSS 3.3 Low · Critical (KEV) · In CISA KEV · Not analysed yet · Published 4 Jan 2022 · Tags: CWE-494 - [Download of code without integrity check in WOWSOFT Printchaser](https://agentprime.io/advisories/CVE-2020-7883.md) `CVE-2020-7883` · CVE record: WOWSOFT Printchaser · No CVSS score · Not analysed yet · Published 28 Dec 2021 · Tags: CWE-494 - [RAONWIZ DEXT5 Upload ActiveX remote file execution vulnerability](https://agentprime.io/advisories/CVE-2020-7875.md) `CVE-2020-7875` · CVE record: RAONWIZ DEXT5 Upload · CVSS 7.5 High · Not analysed yet · Published 28 Oct 2021 · Tags: CWE-494 - [NEXACRO14 Runtime arbitrary file download and execution vulnerability](https://agentprime.io/advisories/CVE-2020-7874.md) `CVE-2020-7874` · CVE record: TOBESOFT NEXACRO14 · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2021 · Tags: CWE-494 - [Download of code without integrity check in Younglimwon Co., Ltd K-System WellComm](https://agentprime.io/advisories/CVE-2020-7873.md) `CVE-2020-7873` · CVE record: Younglimwon Co., Ltd K-System WellComm · CVSS 8.8 High · Not analysed yet · Published 9 Sept 2021 · Tags: CWE-494 - [Incorrect version tags linked to external repository](https://agentprime.io/advisories/GHSA-593v-wcqx-hq2w.md) `GHSA-593v-wcqx-hq2w`, `BIT-parse-2021-47986`, `BIT-parse-2021-47987`, `CVE-2021-47986`, `CVE-2021-47987` · npm `parse-server`: affected `>=4.0.0, <4.5.2 || >=4.6.0, <4.10.0`, fixed in `4.5.2`, `4.10.0` · CVSS 7.7 High · Not analysed yet · Published 7 Sept 2021 · Tags: CWE-484, CWE-494 - [Improper Input Validation in Bitdefender Endpoint Security Tools for Linux](https://agentprime.io/advisories/CVE-2021-3485.md) `CVE-2021-3485` · CVE record: Bitdefender Endpoint Security Tools for Linux · CVSS 6.4 Medium · Not analysed yet · Published 24 May 2021 · Tags: CWE-494 - [Add integrity check of GateManager firmware](https://agentprime.io/advisories/CVE-2020-29032.md) `CVE-2020-29032` · CVE record: Secomea GateManager · CVSS 8.4 High · Not analysed yet · Published 5 Mar 2021 · Tags: CWE-494 - [Download of code without integrity check in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions)](https://agentprime.io/advisories/CVE-2020-28213.md) `CVE-2020-28213` · CVE record: PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) · No CVSS score · Not analysed yet · Published 19 Nov 2020 · Tags: CWE-494 - [Download of code without integrity check in INOGARD Ebiz4u CViewer Object AxECM.dll](https://agentprime.io/advisories/CVE-2020-7831.md) `CVE-2020-7831` · CVE record: INOGARD Ebiz4u CViewer Object AxECM.dll · CVSS 8.8 High · Not analysed yet · Published 24 Aug 2020 · Tags: CWE-494 - [Download of code without integrity check in ActiveSoft MyBrowserPlus](https://agentprime.io/advisories/CVE-2020-7817.md) `CVE-2020-7817` · CVE record: ActiveSoft MyBrowserPlus · CVSS 5.5 Medium · Not analysed yet · Published 6 Aug 2020 · Tags: CWE-494 - [Download of code without integrity check in NETGEAR R6700](https://agentprime.io/advisories/CVE-2020-10926.md) `CVE-2020-10926` · CVE record: NETGEAR R6700 · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2020 · Tags: CWE-494 - [Download of code without integrity check in Bflysoft EyeSurfer BflyInstallerX.ocx](https://agentprime.io/advisories/CVE-2020-7826.md) `CVE-2020-7826` · CVE record: Bflysoft EyeSurfer BflyInstallerX.ocx · CVSS 8.8 High · Not analysed yet · Published 17 Jul 2020 · Tags: CWE-494 - [Download of code without integrity check in Easergy T300 (Firmware version 1.5.2 and older)](https://agentprime.io/advisories/CVE-2020-7505.md) `CVE-2020-7505` · CVE record: Easergy T300 (Firmware version 1.5.2 and older) · No CVSS score · Not analysed yet · Published 16 Jun 2020 · Tags: CWE-494 - [Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-7812.md) `CVE-2020-7812` · CVE record: Kaoni ezHTTPTrans · CVSS 7.8 High · Not analysed yet · Published 28 May 2020 · Tags: CWE-494 - [Kaoni ezHTTPTrans Active-X File Download and Execution Vulnerability](https://agentprime.io/advisories/CVE-2020-7813.md) `CVE-2020-7813` · CVE record: Kaoni ezHTTPTrans · CVSS 7.8 High · Not analysed yet · Published 22 May 2020 · Tags: CWE-494 - [Tobesoft Xplatform ActiveX File Download Vulnerability](https://agentprime.io/advisories/CVE-2020-7806.md) `CVE-2020-7806` · CVE record: Tobesoft Xplatform · CVSS 7.8 High · Not analysed yet · Published 6 May 2020 · Tags: CWE-494 - [Tobesoft Nexacro14 ActiveX File Download Vulnerability](https://agentprime.io/advisories/CVE-2019-19167.md) `CVE-2019-19167` · CVE record: Tobesoft Nexacro14 · CVSS 7.8 High · Not analysed yet · Published 6 May 2020 · Tags: CWE-494 - [Tobesoft XPlatform Arbitrary File Execution Vulnerability](https://agentprime.io/advisories/CVE-2019-19166.md) `CVE-2019-19166` · CVE record: Tobesoft XPlatform · CVSS 7.8 High · Not analysed yet · Published 6 May 2020 · Tags: CWE-494 - [Download of code without integrity check in Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8/10](https://agentprime.io/advisories/CVE-2019-19165.md) `CVE-2019-19165` · CVE record: Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) on Windows 7/8/10 · CVSS 7.2 High · Not analysed yet · Published 29 Apr 2020 · Tags: CWE-494 - [Download of code without integrity check in NAVER Corporation Naver Cloud Explorer](https://agentprime.io/advisories/CVE-2020-9751.md) `CVE-2020-9751` · CVE record: NAVER Corporation Naver Cloud Explorer · No CVSS score · Not analysed yet · Published 3 Mar 2020 · Tags: CWE-494 - [RFD attack via Content-Disposition header sourced from request input by Spring MVC or Spring WebFlux Application](https://agentprime.io/advisories/GHSA-8wx2-9q48-vm9r.md) `GHSA-8wx2-9q48-vm9r`, `CVE-2020-5398` · Maven `org.springframework:spring-webflux` and 1 more: affected `>=5.2.0.RELEASE, <5.2.3.RELEASE || >=5.1.0.RELEASE, <5.1.13.RELEASE || >=5.0.0.RELEASE, <5.0.16.RELEASE`, fixed in `5.2.3.RELEASE`, `5.1.13.RELEASE`, `5.0.16.RELEASE` · CVSS 8.0 High · Critical (CVSS 7+ and EPSS) · EPSS 0.88 · Not analysed yet · Published 21 Jan 2020 · Tags: Cross-site scripting (XSS), CWE-494 - [Download of code without integrity check in MikroTik RouterOS](https://agentprime.io/advisories/CVE-2019-3977.md) `CVE-2019-3977` · CVE record: MikroTik RouterOS · No CVSS score · Not analysed yet · Published 28 Oct 2019 · Tags: CWE-494 - [The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image](https://agentprime.io/advisories/CVE-2019-9534.md) `CVE-2019-9534` · CVE record: Cobham plc Explorer 710 · No CVSS score · Not analysed yet · Published 10 Oct 2019 · Tags: CWE-494 - [Download of code without integrity check in Red Hat openshift](https://agentprime.io/advisories/CVE-2019-14845.md) `CVE-2019-14845` · CVE record: Red Hat openshift · CVSS 5.7 Medium · Not analysed yet · Published 8 Oct 2019 · Tags: CWE-494 - [High severity vulnerability that affects generator-jhipster](https://agentprime.io/advisories/GHSA-mc84-xr9p-938r.md) `GHSA-mc84-xr9p-938r` · npm `generator-jhipster`: affected `<6.3.1`, fixed in `6.3.1` · CVSS 8.1 High · Not analysed yet · Published 23 Sept 2019 · Tags: CWE-494, CWE-829 - [Download of code without integrity check in Philips IntelliVue WLAN, portable patient monitors](https://agentprime.io/advisories/CVE-2019-13534.md) `CVE-2019-13534` · CVE record: Philips IntelliVue WLAN, portable patient monitors · No CVSS score · Not analysed yet · Published 12 Sept 2019 · Tags: CWE-494 - [Download of code without integrity check in YES24 PC VIEWER](https://agentprime.io/advisories/CVE-2019-12809.md) `CVE-2019-12809` · CVE record: YES24 YES24 PC VIEWER · No CVSS score · Not analysed yet · Published 15 Aug 2019 · Tags: CWE-494 - [PrinterLogic Print Management Software updates and executes the code without origin and code verification](https://agentprime.io/advisories/CVE-2018-5409.md) `CVE-2018-5409` · CVE record: PrinterLogic Management Software · No CVSS score · Not analysed yet · Published 8 May 2019 · Tags: CWE-494 - [Java Projects using HTTP to fetch dependencies](https://agentprime.io/advisories/CVE-2019-3801.md) `CVE-2019-3801` · CVE record: Cloud Foundry CredHub and 3 more · CVSS 8.7 High · Not analysed yet · Published 25 Apr 2019 · Tags: CWE-494 - [Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit](https://agentprime.io/advisories/GHSA-jwqm-c9f2-2cq3.md) `GHSA-jwqm-c9f2-2cq3`, `CVE-2019-10240` · Maven `org.eclipse.hawkbit:hawkbit-autoconfigure` and 9 more: affected `<0.3.0M2`, fixed in `0.3.0M2` · CVSS 8.1 High · Not analysed yet · Published 15 Apr 2019 · Tags: Weak cryptography or TLS, CWE-494, CWE-829 - [Download of code without integrity check in Red Hat openstack-rabbitmq-container](https://agentprime.io/advisories/CVE-2018-14620.md) `CVE-2018-14620` · CVE record: Red Hat openstack-rabbitmq-container · CVSS 4.7 Medium · Not analysed yet · Published 10 Sept 2018 · Tags: CWE-494 - [SHDesigns' Resident Download Manager (as well as the Ethernet Download Manager) does not authenticate firmware downloads before executing code and deploying them to devices](https://agentprime.io/advisories/CVE-2016-6567.md) `CVE-2016-6567` · CVE record: SHDesigns Resident Download Manager and 1 more · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-494 - [Ragentek Android software contains an over-the-air update mechanism that communicates over an unencrypted channel, which can allow a remote attacker to execute arbitrary code with root privileges](https://agentprime.io/advisories/CVE-2016-6564.md) `CVE-2016-6564` · CVE record: Ragentek Android software · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-494 - [Download of code without integrity check in Siemens LOGO! Soft Comfort (All versions before V8.2)](https://agentprime.io/advisories/CVE-2017-12740.md) `CVE-2017-12740` · CVE record: Siemens LOGO! Soft Comfort (All versions before V8.2) · No CVSS score · Not analysed yet · Published 26 Dec 2017 · Tags: CWE-494 - [Improper certificate validation in Akeo Consulting Rufus](https://agentprime.io/advisories/CVE-2017-13083.md) `CVE-2017-13083` · CVE record: Akeo Consulting Rufus · CVSS 5.3 Medium · Not analysed yet · Published 18 Oct 2017 · Tags: Weak cryptography or TLS, CWE-345, CWE-494 - [Sensys Networks Traffic Sensor Download of Code Without Integrity Check](https://agentprime.io/advisories/CVE-2014-2378.md) `CVE-2014-2378` · CVE record: Sensys Networks VSN240-F and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 5 Sept 2014 · Tags: CWE-494 - [Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com…](https://agentprime.io/advisories/CVE-2001-1125.md) `CVE-2001-1125` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Mar 2002 · Tags: CWE-494 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .