Search vulnerabilities

Results 3

Export CSV
CVE-2020-25844

CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow

The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.

CVSS 3.1 · 8.1 High EPSS 2.0% KEV · Not listed
Vendors
CVE-2020-25843

CHANGING Inc. NHIServiSignAdapter Windows Versions - Heap Overflow

NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege.

CVSS 3.1 · 8.1 High EPSS 2.0% KEV · Not listed
Vendors
CVE-2020-25842

CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access

The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors