5 results · Clear filters · Feed
-
High 7.5
CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2
The digest generation function of NHIServiSignAdapter has not been verified for source file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.
-
High 7.5
CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -1
Multiple functions of NHIServiSignAdapter failed to verify the users’ file path, which leads to the SMB request being redirected to a malicious host, resulting in the leakage of user's credential.
-
High 8.1
CHANGING Inc. NHIServiSignAdapter Windows Versions - Stack Overflow
The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.
-
High 8.1
CHANGING Inc. NHIServiSignAdapter Windows Versions - Heap Overflow
NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege.
-
High 7.5
CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access
The encryption function of NHIServiSignAdapter fail to verify the file path input by users. Remote attacker can access arbitrary files through the flaw without privilege.