CHANGING vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-15027 CGServiSign developed by Changing has a OS Command Injection vulnerability.High 8.6 · Sep 23, 2026
• CVE-2026-3000 IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to dCritical 9.3 · Mar 2, 2026
• CVE-2026-2999 IDExpert Windows Logon Agent developed by Changing has a Remote Code Execution vulnerability, allowing unauthenticated remote attackers to force the system to dCritical 9.3 · Mar 2, 2026
• CVE-2025-8861 TSA developed by Changing has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to read, modify, and delete database contents.Critical 9.3 · Aug 29, 2025
• CVE-2025-8858 Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read High 8.7 · Aug 29, 2025
• CVE-2025-8857 Clinic Image System developed by Changing contains hard-coded Credentials, allowing unauthenticated remote attackers to log into the system using administrator Critical 9.3 · Aug 29, 2025
• CVE-2024-3123 CHANGING Mobile One Time Password's uploading function in a hidden page does not filter file type properly.High 7.2 · Jul 1, 2024
• CVE-2021-44161 Changing MOTP (Mobile One Time Password) system’s specific function parameter has insufficient validation for user input.High 8.8 · Dec 29, 2021
• CVE-2021-37909 WriteRegistry function in TSSServiSign component does not filter and verify users’ input, remote attackers can rewrite to the registry without permissions thus Critical 9.8 · Sep 15, 2021
• CVE-2020-25846 The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a maliciousHigh 7.5 · Dec 31, 2020
• CVE-2020-25845 Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting High 7.5 · Dec 31, 2020
• CVE-2020-25844 The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole.High 8.1 · Dec 31, 2020
• CVE-2020-25843 NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole.High 8.1 · Dec 31, 2020
• CVE-2020-25842 The encryption function of NHIServiSignAdapter fail to verify the file path input by users.High 7.5 · Dec 31, 2020
• CVE-2020-3938 SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture oCritical 9.8 · Feb 4, 2020
• CVE-2020-3937 SQL Injection in SysJust Syuan-Gu-Da-Shih, versions before 20191223, allowing attackers to perform unwanted SQL queries and access arbitrary file in the databasHigh 8.1 · Feb 4, 2020
• CVE-2020-3927 An arbitrary-file-access vulnerability exists in ServiSign security plugin, as long as the attackers learn the specific API function, they may access arbitrary High 8.3 · Feb 3, 2020
• CVE-2020-3925 A Remote Code Execution(RCE) vulnerability exists in some designated applications in ServiSign security plugin, as long as the interface is captured, attackers High 8.3 · Feb 3, 2020