How many CVEs does Changing Information Technology have?

Changing Information Technology has 34 published CVE records since 2020, including 5 in the last two years.

How many Changing Information Technology CVEs are in CISA KEV?

None of Changing Information Technology's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which Changing Information Technology products have the most CVEs?

The Changing Information Technology products with the most published CVEs are NHIServiSignAdapter, RAVA certificate validation system, TCBServiSign Windows Version, Syuan-Gu-Da-Shih, ServiSign Windows versions.

What are the most common weakness types in Changing Information Technology CVEs?

Changing Information Technology's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-121 (Stack-based Buffer Overflow), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).

How many critical Changing Information Technology vulnerabilities are there?

Changing Information Technology has 9 critical and 17 high-severity CVEs.

What is the average severity of Changing Information Technology CVEs?

The average CVSS base score across Changing Information Technology's scored CVEs is 7.8.

RadicalNotion.AI

Log in Start free

34 CVEs

Changing Information Technology Vulnerabilities

Name: Changing Information Technology vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Changing Information Technology.

34

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

7.8

Avg CVSS

2020–2026

Overview

Changing Information Technology has 34 published CVE records since 2020, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Changing Information Technology products, with severity breakdowns, the most-affected products, the most common weakness types, and the latest disclosures.

Security scorecard

A quick read on Changing Information Technology's vulnerability posture, as a share of its 34 published CVEs.

Average CVSS: 7.8
Critical / high: 76%
Actively exploited (KEV): 0%
Public exploit available: 0%
Patch available: 100%

Severity and exploitation

How the CVSS severity of Changing Information Technology's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical9

High17

Medium8

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Changing Information Technology's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No Changing Information Technology CVEs currently have a tracked public exploit.

Most affected products

The Changing Information Technology products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in Changing Information Technology CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish Changing Information Technology CVE records.

twcert34 CVEs

Disclosure activity by year

How many Changing Information Technology CVEs were published each year.

2020

11

2021

2

2022

4

2024

12

2025

3

2026

2

Latest Changing Information Technology CVEs

The most recently disclosed vulnerabilities affecting Changing Information Technology.

Changing｜IDExpert Windows Logon Agent - Remote Code Execution
CWE-494
Critical · CVSS 9.3
EPSS 0.5%2026-03-02
Changing｜IDExpert Windows Logon Agent - Remote Code Execution
CWE-494
Critical · CVSS 9.3
EPSS 0.5%2026-03-02
Changing｜Clinic Image System - SQL Injection
CWE-89
High · CVSS 8.7
EPSS 0.4%2025-08-29
Changing｜Clinic Image System - Use of Hard-coded Credentials
CWE-798
Critical · CVSS 9.3
EPSS 0.5%2025-08-29
Changing｜TSA - Missing Authentication
CWE-306
Critical · CVSS 9.3
EPSS 0.5%2025-08-29
High vulnerability · 2024-12-31
CWE-294
High · CVSS 8.8
EPSS 0.7%2024-12-31
High vulnerability · 2024-12-31
CWE-302
High · CVSS 8.8
EPSS 0.7%2024-12-31
High vulnerability · 2024-11-01
CWE-78
High · CVSS 7.2
EPSS 0.6%2024-11-01
Medium vulnerability · 2024-11-01
CWE-79
Medium · CVSS 6.1
EPSS 0.3%2024-11-01
CHANGING Information Technology IDExpert - Arbitrary File Read through Path Traversal
CWE-36
Medium · CVSS 4.9
EPSS 0.6%2024-11-01
Medium vulnerability · 2024-08-02
CWE-121
Medium · CVSS 4.3
EPSS 0.5%2024-08-02
Medium vulnerability · 2024-08-02
CWE-121
Medium · CVSS 4.3
EPSS 0.5%2024-08-02

Track new Changing Information Technology CVEs as they are disclosed and get AI-written analysis and remediation guidance.

Monitor Changing Information Technology CVEs

Other vendors

Browse vulnerabilities for other tracked vendors.

microsoft36,673 CVEs linux22,774 CVEs Google16,481 CVEs Apple15,095 CVEs Oracle12,708 CVEs Debian10,226 CVEs IBM8,839 CVEs Red Hat8,111 CVEs

Browse all vendors

Frequently asked questions

Common questions about Changing Information Technology vulnerabilities.

How many CVEs does Changing Information Technology have?: Changing Information Technology has 34 published CVE records since 2020, including 5 in the last two years.
How many Changing Information Technology CVEs are in CISA KEV?: None of Changing Information Technology's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which Changing Information Technology products have the most CVEs?: The Changing Information Technology products with the most published CVEs are NHIServiSignAdapter, RAVA certificate validation system, TCBServiSign Windows Version, Syuan-Gu-Da-Shih, ServiSign Windows versions.
What are the most common weakness types in Changing Information Technology CVEs?: Changing Information Technology's CVEs most often map to these CWE weakness types: CWE-20 (Improper Input Validation), CWE-121 (Stack-based Buffer Overflow), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')).
Are there public exploits for Changing Information Technology vulnerabilities?: No Changing Information Technology CVEs currently have a tracked public exploit in this dataset.
How many critical Changing Information Technology vulnerabilities are there?: Changing Information Technology has 9 critical and 17 high-severity CVEs.
What is the average severity of Changing Information Technology CVEs?: The average CVSS base score across Changing Information Technology's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Changing Information Technology vulnerabilities

Monitor new Changing Information Technology vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing