Lucene search
K

30 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-27003

Malicious code in bioql PyPI...

4.9CVSS5.4AI score0.00903EPSS
Exploits0References1
OSV
OSV
added 2023/04/27 2:15 a.m.1 views

CVE-2023-22901

ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system files...

4.9CVSS6AI score
Exploits0References1
NVD
NVD
added 2023/04/27 2:15 a.m.16 views

CVE-2023-22901

ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system files...

4.9CVSS5.2AI score0.00903EPSS
Exploits0References1
Prion
Prion
added 2023/04/27 2:15 a.m.13 views

Path traversal

ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system files...

3.3CVSS5.3AI score0.00903EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/27 12:0 a.m.7 views

CVE-2023-22901 ChangingTec MOTP - Path Traversal

ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system files...

4.9CVSS5.3AI score0.00903EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/04/27 12:0 a.m.3 views

ChangingTec MOTP 路径遍历漏洞

ChangingTec MOTP is a cell phone authentication software from the Chinese company ChangingTec. ChangingTec MOTP suffers from a path traversal vulnerability. A remote attacker can exploit this vulnerability to access arbitrary system files...

4.9CVSS5.7AI score0.00903EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/04/27 12:0 a.m.19 views

CVE-2023-22901 ChangingTec MOTP - Path Traversal

ChangingTec MOTP system has a path traversal vulnerability. A remote attacker with administrator’s privilege can exploit this vulnerability to access arbitrary system files...

4.9CVSS5.6AI score0.00903EPSS
Exploits0References1
CVE
CVE
added 2023/04/27 12:0 a.m.33 views

CVE-2023-22901

CVE-2023-22901 concerns the ChangingTec MOTP system, which is reported to have a path traversal vulnerability. The affected component is the MOTP system itself, with the root cause described as a path traversal flaw that could allow a remote attacker with administrator privileges to access arbitr...

4.9CVSS5.2AI score0.00903EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/01/31 12:0 a.m.3 views

Changingtec ServiSign 路径遍历漏洞

Changingtec ServiSign is a system from Changingtec Taiwan, China. The system provides a cross-platform solution for digital signatures and authentication. A path traversal vulnerability exists in the ChangingTech MegaServiSignAdapter, which stems from its file reading feature that allows an...

7.5CVSS7.6AI score0.0099EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/01/31 12:0 a.m.21 views

CVE-2022-39059 ChangingTec MegaServiSignAdapter - Path Traversal

ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files...

7.5CVSS7.8AI score0.0099EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/01/31 12:0 a.m.4 views

Changingtec ServiSign 缓冲区错误漏洞

Changingtec ServiSign is a system from Changingtec Taiwan, China. The system provides a cross-platform solution for digital signatures and verification. A buffer error vulnerability exists in the ChangingTech MegaServiSignAdapter, which stems from the presence of a parameter length validation...

6.5CVSS6.8AI score0.00708EPSS
Exploits0References2
NVD
NVD
added 2023/01/03 3:15 a.m.15 views

CVE-2022-46304

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers command injection and allows the attacker to execute arbitrary...

8.8CVSS9.2AI score0.01507EPSS
Exploits0References1
NVD
NVD
added 2023/01/03 3:15 a.m.17 views

CVE-2022-46305

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

6.5CVSS6.7AI score0.00398EPSS
Exploits0References1
NVD
NVD
added 2023/01/03 3:15 a.m.19 views

CVE-2022-46306

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files...

8.8CVSS8.8AI score0.00917EPSS
Exploits0References1
Prion
Prion
added 2023/01/03 3:15 a.m.17 views

Path traversal

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

3.3CVSS6.8AI score0.00398EPSS
Exploits0References1
Prion
Prion
added 2023/01/03 3:15 a.m.20 views

Command injection

ChangingTec ServiSign component has insufficient filtering for special characters in the connection response parameter. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers command injection and allows the attacker to execute arbitrary...

6.8CVSS9.2AI score0.01507EPSS
Exploits0References1
Prion
Prion
added 2023/01/03 3:15 a.m.13 views

Path traversal

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files...

4.4CVSS7.7AI score0.00917EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/01/03 12:0 a.m.10 views

CVE-2022-46306 ChangingTec ServiSign - Path Traversal

ChangingTec ServiSign component has a path traversal vulnerability due to insufficient filtering for special characters in the DLL file path. An unauthenticated remote attacker can host a malicious website for the component user to access, which triggers the component to load malicious DLL files...

8.8CVSS8.8AI score0.00917EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/01/03 12:0 a.m.4 views

CVE-2022-46305 ChangingTec ServiSign - Path Traversal

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

6.5CVSS6.8AI score0.00398EPSS
Exploits0References1
Cvelist
Cvelist
added 2023/01/03 12:0 a.m.20 views

CVE-2022-46305 ChangingTec ServiSign - Path Traversal

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

6.5CVSS6.9AI score0.00398EPSS
Exploits0References1
Rows per page
Query Builder