Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ChangingtecTcb Servisign

4 matches found

CVE
CVE•added 2024/08/02 11:16 a.m.•83 views

CVE-2024-40721

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from an arbitrary path.

8.8CVSS8.7AI score0.00654EPSS
CVE
CVE•added 2024/08/02 11:16 a.m.•62 views

CVE-2024-40720

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the HKEY_CURRENT_USER registry to execute arbitrary commands.

8.8CVSS9AI score0.00702EPSS
CVE
CVE•added 2024/08/02 11:16 a.m.•36 views

CVE-2024-40722

The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buffer overflow in the TCBServiSign, temporarily disr...

4.3CVSS5.1AI score0.00368EPSS
CVE
CVE•added 2024/08/02 10:16 a.m.•32 views

CVE-2024-40719

The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious website, TCBServiSign will treat that website as a legitimate server and interact with it.

6.5CVSS6.5AI score0.00037EPSS