CVE-2026-3000 | Critical | 9.8 | 2026-03-02 | IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to… |
CVE-2026-2999 | Critical | 9.8 | 2026-03-02 | IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to… |
CVE-2024-40723 | Medium | 4.3 | 2024-08-02 | The specific API in HWATAIServiSign Windows Version from CHANGING Information Technology does not properly validate the length of server-side inputs. When a us… |
CVE-2024-40722 | Medium | 4.3 | 2024-08-02 | The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a u… |
CVE-2024-40721 | High | 8.8 | 2024-08-02 | The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofe… |
CVE-2024-40720 | High | 8.8 | 2024-08-02 | The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofe… |
CVE-2024-40719 | Medium | 6.5 | 2024-08-02 | The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker trick… |
CVE-2023-22901 | Medium | 4.9 | 2023-04-27 | ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary… |
CVE-2022-39061 | Medium | 6.5 | 2023-01-31 | ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthenticated r… |
CVE-2022-39060 | Critical | 9.8 | 2023-01-31 | ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vulnerability… |
CVE-2022-39059 | High | 7.5 | 2023-01-31 | ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker can exploit… |
CVE-2022-46306 | High | 8.8 | 2023-01-03 | ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticate… |
CVE-2022-46305 | Medium | 6.5 | 2023-01-03 | ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and… |
CVE-2022-46304 | High | 8.8 | 2023-01-03 | ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can… |
CVE-2022-39058 | High | 7.5 | 2022-10-18 | RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentica… |
CVE-2022-39057 | High | 7.2 | 2022-10-18 | RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator privilege… |
CVE-2022-39056 | Critical | 9.8 | 2022-10-18 | RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to access, m… |
CVE-2022-39055 | Medium | 5.3 | 2022-10-18 | RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal… |
CVE-2021-44161 | High | 8.8 | 2021-12-29 | Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area network can… |
CVE-2020-3927 | High | 8.3 | 2020-02-03 | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary… |
CVE-2020-3926 | Medium | 6.1 | 2020-02-03 | An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary… |
CVE-2020-3925 | High | 8.3 | 2020-02-03 | A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers… |