{"items":[{"id":"CVE-2026-15027","published":"2026-09-23T08:18:49.332Z","updated":"2026-09-23T14:10:55.442Z","title":"Changing｜CGServiSign - OS Command Injection","severity":"HIGH","score":8.6,"vendor":"Changing","product":"CGServiSign","kev":false,"epss":0.03162,"kevAdded":null,"exploit":false},{"id":"CVE-2026-3000","published":"2026-03-02T06:03:51.910Z","updated":"2026-03-02T14:08:22.120Z","title":"Changing｜IDExpert Windows Logon Agent - Remote Code Execution","severity":"CRITICAL","score":9.3,"vendor":"Changing","product":"IDExpert Windows Logon Agent","kev":false,"epss":0.00559,"kevAdded":null,"exploit":false},{"id":"CVE-2026-2999","published":"2026-03-02T05:59:35.309Z","updated":"2026-03-02T14:09:57.935Z","title":"Changing｜IDExpert Windows Logon Agent - Remote Code Execution","severity":"CRITICAL","score":9.3,"vendor":"Changing","product":"IDExpert Windows Logon Agent","kev":false,"epss":0.0056,"kevAdded":null,"exploit":false},{"id":"CVE-2025-8858","published":"2025-08-29T03:36:21.390Z","updated":"2025-08-29T16:27:14.212Z","title":"Changing｜Clinic Image System - SQL Injection","severity":"HIGH","score":8.7,"vendor":"Changing","product":"Clinic Image System","kev":false,"epss":0.00438,"kevAdded":null,"exploit":false},{"id":"CVE-2025-8857","published":"2025-08-29T03:33:20.683Z","updated":"2025-08-29T13:26:36.549Z","title":"Changing｜Clinic Image System - Use of Hard-coded Credentials","severity":"CRITICAL","score":9.3,"vendor":"Changing","product":"Clinic Image System","kev":false,"epss":0.00531,"kevAdded":null,"exploit":false},{"id":"CVE-2025-8861","published":"2025-08-29T03:28:07.911Z","updated":"2025-08-29T13:25:39.333Z","title":"Changing｜TSA - Missing Authentication","severity":"CRITICAL","score":9.3,"vendor":"Changing","product":"TSA","kev":false,"epss":0.00519,"kevAdded":null,"exploit":false},{"id":"CVE-2024-3123","published":"2024-07-01T02:52:34.721Z","updated":"2024-08-01T19:32:42.884Z","title":"CHANGING Mobile One Time Password - Arbitrary File Upload","severity":"HIGH","score":7.2,"vendor":"CHANGING","product":"Mobile One Time Password","kev":false,"epss":0.00593,"kevAdded":null,"exploit":false},{"id":"CVE-2024-3122","published":"2024-07-01T02:39:14.560Z","updated":"2024-08-01T19:32:42.703Z","title":"CHANGING Mobile One Time Password - Arbitrary File Reading","severity":"MEDIUM","score":4.9,"vendor":"CHANGING","product":"Mobile One Time Password","kev":false,"epss":0.00613,"kevAdded":null,"exploit":false},{"id":"CVE-2021-44161","published":"2021-12-29T07:15:16.708Z","updated":"2024-09-16T16:38:54.142Z","title":"Changing Information Technology Inc. MOTP(Mobile One Time Password) - SQL Injection","severity":"HIGH","score":8.8,"vendor":"Changing","product":"MOTP(Mobile One Time Password)","kev":false,"epss":0.00512,"kevAdded":null,"exploit":false},{"id":"CVE-2020-3939","published":"2020-02-04T04:15:22.493Z","updated":"2024-09-17T01:36:41.076Z","title":"SysJust Syuan-Gu-Da-Shih -Cross-Site Scripting(XSS)","severity":"MEDIUM","score":6.1,"vendor":"CHANGING","product":"Syuan-Gu-Da-Shih","kev":false,"epss":0.00699,"kevAdded":null,"exploit":false},{"id":"CVE-2020-3938","published":"2020-02-04T04:15:22.050Z","updated":"2024-09-16T17:38:53.967Z","title":"SysJust Syuan-Gu-Da-Shih -Request-Forgery","severity":"CRITICAL","score":9.8,"vendor":"CHANGING","product":"Syuan-Gu-Da-Shih","kev":false,"epss":0.01481,"kevAdded":null,"exploit":false},{"id":"CVE-2020-3937","published":"2020-02-04T04:15:21.658Z","updated":"2024-09-16T17:57:51.194Z","title":"SysJust Syuan-Gu-Da-Shih-SQL injection","severity":"HIGH","score":8.1,"vendor":"CHANGING","product":"Syuan-Gu-Da-Shih","kev":false,"epss":0.01375,"kevAdded":null,"exploit":false},{"id":"CVE-2020-3927","published":"2020-02-03T11:00:31.635Z","updated":"2024-09-16T22:55:21.477Z","title":"ServiSign Windows Versions- Arbitrary File  Deletion","severity":"HIGH","score":8.3,"vendor":"CHANGING","product":"ServiSign Windows versions","kev":false,"epss":0.01205,"kevAdded":null,"exploit":false},{"id":"CVE-2020-3926","published":"2020-02-03T11:00:31.233Z","updated":"2024-09-16T17:14:45.590Z","title":"ServiSign Windows Versions- Arbitrary File  Access","severity":"MEDIUM","score":6.1,"vendor":"CHANGING","product":"ServiSign Windows versions","kev":false,"epss":0.01482,"kevAdded":null,"exploit":false},{"id":"CVE-2020-3925","published":"2020-02-03T11:00:30.831Z","updated":"2024-09-17T03:22:58.327Z","title":"ServiSign Windows Versions- Remote Code Execution via  LoadLibrary","severity":"HIGH","score":8.3,"vendor":"CHANGING","product":"ServiSign Windows versions","kev":false,"epss":0.02775,"kevAdded":null,"exploit":false}]}