CVE-2024-40721
- EPSS 2.28%
- Veröffentlicht 02.08.2024 11:16:43
- Zuletzt bearbeitet 09.08.2024 14:36:58
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause the TCBServiSign to load a DLL from a...
CVE-2024-40722
- EPSS 1.42%
- Veröffentlicht 02.08.2024 11:16:43
- Zuletzt bearbeitet 09.08.2024 14:39:28
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does does not properly validate the length of server-side input. When a user visits a spoofed website, unauthenticated remote attackers can cause a stack-based buff...
CVE-2024-40720
- EPSS 3.8%
- Veröffentlicht 02.08.2024 11:16:42
- Zuletzt bearbeitet 09.08.2024 14:36:35
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `HKEY_CURRENT_USER` registry to ...
CVE-2024-40719
- EPSS 0.12%
- Veröffentlicht 02.08.2024 10:16:00
- Zuletzt bearbeitet 09.08.2024 14:36:32
The encryption strength of the authorization keys in CHANGING Information Technology TCBServiSign Windows Version is insufficient. When a remote attacker tricks a victim into visiting a malicious website, TCBServiSign will treat that website as a leg...