Lucene search

K

NHIServiSignAdapter Security Vulnerabilities

cve
cve

CVE-2020-25844

The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without...

9.8CVSS

9.7AI Score

0.007EPSS

2020-12-31 08:15 AM
22
cve
cve

CVE-2020-25846

The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's...

7.5CVSS

7.4AI Score

0.002EPSS

2020-12-31 08:15 AM
19
cve
cve

CVE-2020-25845

Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's...

7.5CVSS

7.3AI Score

0.002EPSS

2020-12-31 08:15 AM
21
cve
cve

CVE-2020-25842

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without...

7.5CVSS

7.6AI Score

0.003EPSS

2020-12-31 08:15 AM
16
2
cve
cve

CVE-2020-25843

NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without...

9.8CVSS

9.6AI Score

0.007EPSS

2020-12-31 08:15 AM
17
2