Records42All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high21CVSS 7.0–8.9
Exploited now
CHANGING records in CISA KEVNo CHANGING vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 41
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00564 · Published 2024-08-02 · Fixed in 1.0.24.0318 CWE-20
Priority MEDIUM 41
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00593 · Published 2024-08-02 · Fixed in 1.0.24.0318 CWE-20
Priority LOW 28
The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00185 · Published 2024-08-02 · Fixed in 1.0.24.0318 CWE-326
Priority LOW 21
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00481 · Published 2024-08-02 · Fixed in 1.0.24.0318 CWE-121
THREATIST.IORead the docs