Browse CVEs

CRITICAL 9.8 CVE-2026-3000 IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the … Idexpert after 2.8.4.250925 Fix from $2,3002026-03-02 CRITICAL 9.8 CVE-2026-2999 IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the … Idexpert after 2.8.4.250925 Fix from $2,3002026-03-02 HIGH 8.8 CVE-2024-40721 The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visit… Tcb Servisign 1.0.24.0318+ Fix from $1,9502024-08-02 HIGH 8.8 CVE-2024-40720 The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visit… Tcb Servisign 1.0.24.0318+ Fix from $1,9502024-08-02 MEDIUM 6.5 CVE-2024-40719 The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote atta… Tcb Servisign 1.0.24.0318+ Fix from $1,6002024-08-02 CRITICAL 9.8 CVE-2022-39060 ChangingTech MegaServiSignAdapter component has a vulnerability of improper input validation. An unauthenticated remote attacker can exploit this vul… Megaservisignadapter 1.0.22.1004+ Fix from $2,3002023-01-31 MEDIUM 6.5 CVE-2022-39061 ChangingTech MegaServiSignAdapter component has a vulnerability of Out-of-bounds Read due to insufficient validation for parameter length. An unauthe… Megaservisignadapter 1.0.22.1004+ Fix from $1,6002023-01-31 HIGH 7.5 CVE-2022-39059 ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker c… Megaservisignadapter 1.0.22.1004+ Fix from $1,9502023-01-31 HIGH 8.8 CVE-2022-46304 ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote att… Servisign Mitigation only Fix from $1,9502023-01-03 HIGH 7.8 CVE-2022-46306 ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unau… Servisign Mitigation only Fix from $1,9502023-01-03 MEDIUM 6.5 CVE-2022-46305 ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authenti… Servisign Mitigation only Fix from $1,6002023-01-03 CRITICAL 9.8 CVE-2022-39056 RAVA certificate validation system has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL command to… Rava Certificate Validation System Mitigation only Fix from $2,3002022-10-18 HIGH 7.5 CVE-2022-39058 RAVA certification validation system has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass … Rava Certificate Validation System Mitigation only Fix from $1,9502022-10-18 HIGH 7.2 CVE-2022-39057 RAVA certificate validation system has insufficient filtering for special parameter of the web page input field. A remote attacker with administrator… Rava Certificate Validation System Mitigation only Fix from $1,9502022-10-18 MEDIUM 5.3 CVE-2022-39055 RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover… Rava Certificate Validation System Mitigation only Fix from $1,6002022-10-18 HIGH 8.8 CVE-2021-44161 Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input. A attacker in local area ne… Motp Mitigation only Fix from $1,9502021-12-29 HIGH 8.8 CVE-2020-3925 A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured,… Servisign after 1.0.19.0617 Fix from $1,9502020-02-03 HIGH 7.5 CVE-2020-3926 An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access… Servisign after 1.0.19.0617 Fix from $1,9502020-02-03 HIGH 7.5 CVE-2020-3927 An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access… Servisign after 1.0.19.0617 Fix from $1,9502020-02-03