CWE-494 下载代码缺少完整性检查 类弱点 138 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-494指下载代码时未进行完整性校验的漏洞。攻击者常通过劫持传输通道、DNS欺骗或入侵源服务器，篡改下载内容以植入恶意代码。开发者应实施数字签名验证或哈希校验，确保代码来源可信且未被篡改，从而防止执行被操纵的程序，保障系统安全。
URL[] classURLs= new URL[]{ new URL("file:subdir/") }; URLClassLoader loader = new URLClassLoader(classURLs); Class loadedClass = Class.forName("loadMe", true, loader);//assume the password is already encrypted, avoiding CWE-312 function authenticate($username,$password){ include("http://external.example.com/dbInfo.php"); //dbInfo.php makes $dbhost, $dbuser, $dbpass, $dbname available mysql_connect($dbhost, $dbuser, $dbpass) or die ('Error connecting to mysql'); mysql_select_db($dbname); $query = 'Select * from users where username='.$username.' And password='.$password; $result = mysql_query($query); if(mysql_numrows($result) == 1){ mysql_close(); return true; } else{ mysql_close(); return false; } }| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2025-11493 | ConnectWise Automate Agent 安全漏洞 — Automate | 8.8 | High | 2025-10-16 |
| CVE-2025-34212 | Vasion Print Virtual Appliance Host 安全漏洞 — Print Virtual Appliance Host | 8.1AI | High AI | 2025-09-29 |
| CVE-2025-9319 | Lenovo Wallpaper Client 安全漏洞 — Wallpaper Client | 7.5 | High | 2025-09-11 |
| CVE-2025-30199 | ECOVACS robot vacuums 安全漏洞 — DEEBOT X1 Series | 7.2 | High | 2025-09-05 |
| CVE-2025-35115 | Agiloft 安全漏洞 — Agiloft | 8.1 | High | 2025-08-26 |
| CVE-2025-31355 | Tenda AC6 安全漏洞 — AC6 V5.0 | 7.2 | High | 2025-08-20 |
| CVE-2025-53520 | EG4 Electronics EG4 Inverters 安全漏洞 — EG4 12kPV | 8.8 | High | 2025-08-08 |
| CVE-2025-53696 | Johnson Controls iSTAR Ultra 安全漏洞 — iSTAR Ultra | 8.8AI | High AI | 2025-07-28 |
| CVE-2025-7620 | DSIC Cross-browser Components for Official Document Creation 安全漏洞 — Cross-browser Components for Official Document Creation | 8.8 | High | 2025-07-14 |
| CVE-2025-27593 | SICK DL100-2xxxxxxx 安全漏洞 — SICK DL100-2xxxxxxx | 9.3 | Critical | 2025-03-14 |
| CVE-2024-43169 | IBM Engineering Requirements Management DOORS Next 安全漏洞 — Engineering Requirements Management DOORS Next | 8.8 | High | 2025-03-03 |
| CVE-2025-1058 | Schneider Electric ASCO 5310和ASCO 5350 安全漏洞 — ASCO 5310 Single-Channel Remote Annunciator | 8.1 | High | 2025-02-13 |
| CVE-2024-52331 | ECOVACS robot lawnmowers和vacuums 安全漏洞 — Unspecified robots | 7.5 | High | 2025-01-23 |
| CVE-2024-42183 | HCL BigFix Patch Management 安全漏洞 — BigFix Patch Management Download Plug-ins | 2.5 | Low | 2025-01-23 |
| CVE-2024-54126 | TP-Link Archer C50 安全漏洞 — Archer C50 Wireless Router | 6.8 | - | 2024-12-05 |
| CVE-2024-52583 | WesHacks 安全漏洞 — WesHacks | 8.2 | High | 2024-11-18 |
| CVE-2024-48974 | Baxter Life2000 安全漏洞 — Life2000 Ventilation System | 9.3 | Critical | 2024-11-14 |
| CVE-2024-33660 | AMI AptioV 安全漏洞 — AptioV | 6.1AI | Medium AI | 2024-11-12 |
| CVE-2024-39819 | Zoom Meeting SDK和Zoom Workplace 安全漏洞 — Zoom Workplace Apps and SDK for Windows | 6.7 | Medium | 2024-07-15 |
| CVE-2023-41921 | Kiloview P1和P2 安全漏洞 — P1/P2 | 9.8 | Critical | 2024-07-02 |
| CVE-2024-39348 | Synology Router Manager 安全漏洞 — Synology Router Manager (SRM) | 7.5 | High | 2024-06-28 |
| CVE-2024-30206 | Siemens 多款产品 安全漏洞 — SIMATIC RTLS Locating Manager | 8.8 | High | 2024-05-14 |
| CVE-2023-39474 | Inductive Automation Ignition 安全漏洞 — Ignition | 7.8 | - | 2024-05-03 |
| CVE-2024-28878 | IO-1020 Micro ELD 安全漏洞 — IO-1020 Micro ELD | 9.6 | Critical | 2024-04-12 |
| CVE-2024-28850 | WordPress plugin WP Crontrol 安全漏洞 — wp-crontrol | 8.2 | High | 2024-03-25 |
| CVE-2024-27438 | Apache Doris 安全漏洞 — Apache Doris | 8.8AI | High AI | 2024-03-21 |
| CVE-2023-46144 | PHOENIX CONTACT PLCnext Engineer和PLCnext Control Devices 安全漏洞 — AXC F 1152 | 6.5 | Medium | 2023-12-14 |
| CVE-2023-46143 | PHOENIX CONTACT多个产品 安全漏洞 — Automation Worx Software Suite | 7.5 | High | 2023-12-14 |
| CVE-2023-5592 | PHOENIX CONTACT ProConOS/ProConOS eCLR 安全漏洞 — MULTIPROG | 7.5 | High | 2023-12-14 |
| CVE-2023-5630 | Schneider Electric Trio Q-Series Ethernet Data Radio 安全漏洞 — Trio Q-Series Ethernet Data Radio | 6.5 | Medium | 2023-12-14 |
CWE-494（下载代码缺少完整性检查） 是常见的弱点类别，本平台收录该类弱点关联的 138 条 CVE 漏洞。