CWE-494
CVEs classified under CWE-494, newest first.
63 CVEsRSS
CVE-2022-24644High· 8.8PoCZZ Inc
ZZ Inc. KeyMouse Windows 3.08 and prior is affected by a remote code execution vulnerability during an unauthenticated update. To exploit this vulnerability, a user must trigger an update of an affected installation of KeyMouse.
▾ Midnightzzinc · keymouse_firmwareEPSS 1.9%via NVD
GHSA-593v-wcqx-hq2wHigh· 7.5Incorrect version tags linked to external repository
Incorrect version tags linked to external repository
▾ Twilightparse-server · parse-servervia GHSA
CVE-2020-5398High· 7.5PoCIn Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in…
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in…
▾ Midnightvmware · spring_frameworkEPSS 88%via NVD