CWE-354 完整性检查值验证不恰当 类弱点 109 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-354 属于完整性校验失效漏洞，指产品未正确验证消息的校验和或完整性检查值。攻击者常利用此缺陷篡改传输中的数据，而系统因无法检测修改导致处理恶意或损坏信息。开发者应严格遵循协议规范，在数据使用前实施正确的校验算法，确保数据未被篡改，从而有效规避此类安全风险。
sd = socket(AF_INET, SOCK_DGRAM, 0); serv.sin_family = AF_INET; serv.sin_addr.s_addr = htonl(INADDR_ANY); servr.sin_port = htons(1008); bind(sd, (struct sockaddr *) & serv, sizeof(serv)); while (1) { memset(msg, 0x0, MAX_MSG); clilen = sizeof(cli); if (inet_ntoa(cli.sin_addr)==...) n = recvfrom(sd, msg, MAX_MSG, 0, (struct sockaddr *) & cli, &clilen); }while(true) { DatagramPacket packet = new DatagramPacket(data,data.length,IPAddress, port); socket.send(sendPacket); }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-4616 | Palo Alto Prisma Browser 安全漏洞 — Prisma Browser | 5.5 | - | 2025-11-14 |
| CVE-2024-7402 | Netskope Client 安全漏洞 — Netskope Client | 8.1AI | High AI | 2025-08-14 |
| CVE-2025-54887 | JWE 安全漏洞 — ruby-jwe | 9.1 | Critical | 2025-08-08 |
| CVE-2025-7096 | Comodo Internet Security Premium 安全漏洞 — Internet Security Premium | 8.1 | High | 2025-07-06 |
| CVE-2024-46992 | Electron 安全漏洞 — electron | 7.8 | High | 2025-07-01 |
| CVE-2025-39203 | Hitachi Energy MicroSCADA X SYS600 安全漏洞 — MicroSCADA X SYS600 | 6.5 | Medium | 2025-06-24 |
| CVE-2025-4418 | AVEVA PI Connector for CygNet 安全漏洞 — PI Connector for CygNet | 4.4 | Medium | 2025-06-12 |
| CVE-2025-3479 | WordPress plugin Forminator Forms 安全漏洞 — Forminator Forms – Contact Form, Payment Form & Custom Form Builder | 5.3 | Medium | 2025-04-17 |
| CVE-2025-3247 | WordPress plugin Contact Form 安全漏洞 — Contact Form 7 | 5.3 | Medium | 2025-04-16 |
| CVE-2024-47573 | Fortinet FortiNDR 安全漏洞 — FortiNDR | 6.0 | Medium | 2025-03-14 |
| CVE-2024-47935 | TXOne多款产品 安全漏洞 — StellarProtect (Legacy Mode) | 6.7 | Medium | 2025-02-17 |
| CVE-2025-25183 | vLLM 安全漏洞 — vllm | 2.6 | Low | 2025-02-07 |
| CVE-2023-50738 | Lexmark 安全漏洞 — Printer Firmware | 4.3 | Medium | 2025-01-17 |
| CVE-2020-9210 | Huawei Myna 安全漏洞 — Myna | 6.8 | Medium | 2024-12-27 |
| CVE-2024-47255 | 2N Access Commander 安全漏洞 — 2N Access Commander | 4.7 | Medium | 2024-11-05 |
| CVE-2024-48930 | secp256k1-node 安全漏洞 — secp256k1-node | 7.5AI | High AI | 2024-10-21 |
| CVE-2024-47089 | Apex Softcell LD Geo 安全漏洞 — LD Geo | 8.1AI | High AI | 2024-09-19 |
| CVE-2024-45789 | Reedos aiM-Star 安全漏洞 — Mutual Fund Distribution Product (aiM-Star) | 6.5AI | Medium AI | 2024-09-11 |
| CVE-2024-41909 | Apache MINA SSHD 安全漏洞 — Apache MINA SSHD | - | - AI | 2024-08-12 |
| CVE-2024-34714 | Hoppscotch 安全漏洞 — hoppscotch-extension | 7.6 | High | 2024-05-14 |
| CVE-2024-3727 | image 安全漏洞 | 8.3 | High | 2024-05-09 |
| CVE-2024-23462 | Zscaler Client Connector 安全漏洞 — Client Connector | 3.3 | Low | 2024-05-02 |
| CVE-2024-23461 | Zscaler Client Connector 安全漏洞 — Client Connector | 4.2 | Medium | 2024-05-02 |
| CVE-2023-41970 | Zscaler Client Connector 安全漏洞 — Client Connector | 6.0 | Medium | 2024-05-02 |
| CVE-2024-32883 | MCUboot 安全漏洞 — mcuboot | 7.7 | High | 2024-04-26 |
| CVE-2023-28802 | Zscaler Client Connector 安全漏洞 — Client Connector | 4.9 | Medium | 2023-11-21 |
| CVE-2023-28002 | Fortinet FortiOS 安全漏洞 — FortiOS | 5.8 | Medium | 2023-11-14 |
| CVE-2023-4929 | MOXA NPort 5000 Series 安全漏洞 — NPort 5000AI-M12 Series | 6.5 | Medium | 2023-10-03 |
| CVE-2023-2975 | OpenSSL 授权问题漏洞 — OpenSSL | 7.5 | - | 2023-07-14 |
| CVE-2023-36537 | Zoom Rooms 安全漏洞 — Zoom Rooms for Windows | 7.3 | High | 2023-07-11 |
CWE-354（完整性检查值验证不恰当） 是常见的弱点类别，本平台收录该类弱点关联的 109 条 CVE 漏洞。