CWE-545 - DEPRECATED: Use of Dynamic Class Loading

CWE ID:

CWE-545

Abstraction:Variant
Structure:Simple
Status:Deprecated

Release Date:2006-07-19
Latest Modification Date:2023-06-29

Weakness Name

DEPRECATED: Use of Dynamic Class Loading

Description

This weakness has been deprecated because it partially overlaps CWE-470, it describes legitimate programmer behavior, and other portions will need to be integrated into other entries.

Top Security News

Oracle denies breach after hacker claims theft of 6 million data records
Oracle Health breach compromises patient data at US hospitals
ChatGPT is down worldwide with something went wrong error
CrushFTP: Patch critical vulnerability ASAP! (CVE-2025-2825)
Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp
CosmicSting flaw impacts 75% of Adobe Commerce, Magento sites
Chinese hacking groups target Russian government, IT firms
New SuperBlack ransomware exploits Fortinet auth bypass flaws
Attackers are targeting CrushFTP vulnerability with public PoC (CVE-2025-2825)
RANsacked: Over 100 Security Flaws Found in LTE and 5G Network Implementations

Top CVE List

CVE-2025-22224 VMware ESXi and Workstation TOCTOU Race Condition Vulnerability
CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability
CVE-2022-43939 Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability
CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability
CVE-2022-43769 Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability
CVE-2024-40890 Zyxel DSL CPE OS Command Injection Vulnerability
CVE-2025-24983 Microsoft Windows Win32k Use-After-Free Vulnerability
CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability
CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

Top Alert List

CSP
Content Security Policy (CSP) Header Not Set
MediumAbsence of Anti-CSRF Tokens
MediumMissing Anti-clickjacking Header
InformationalInformation Disclosure - Suspicious Comments
LowCross-Domain JavaScript Source File Inclusion
MediumContent Security Policy (CSP) Header Not Set
LowTimestamp Disclosure - Unix
LowCSP: X-Content-Security-Policy
InformationalRe-examine Cache-control Directives

Common CWEs

HighCWE-649 Reliance on Obfuscation or Encryption of Security-Relevant Inputs without Integrity Checking
CWE-201 Insertion of Sensitive Information Into Sent Data
MediumCWE-196 Unsigned to Signed Conversion Error
CWE-29 Path Traversal: '\..\filename'
CWE-365 DEPRECATED: Race Condition in Switch
CWE-575 EJB Bad Practices: Use of AWT Swing
CWE-1075 Unconditional Control Flow Transfer outside of Switch Block
CWE-266 Incorrect Privilege Assignment
HighCWE-309 Use of Password System for Primary Authentication
CWE-1279 Cryptographic Operations are run Before Supporting Units are Ready