DEVCORE

13 credited records · 0 in the last 12 months · 0 in CISA KEV

Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.

Credited records

Researchers

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-22900No exploit	Thinking Software Technology Co., Ltd. Efence - SQL Injectionthinkingsoftware · efence · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.0%	Jan 31, 2023
26Monitor	CVE-2022-39061No exploit	ChangingTec MegaServiSignAdapter - Out-of-bounds Readchangingtec · megaservisignadapter · CWE-125 Pre-auth Memory safety	Medium6.5	—	0.7%	Jan 31, 2023
39Monitor	CVE-2022-39060No exploit	ChangingTec MegaServiSignAdapter - Improper Input Validationchangingtec · megaservisignadapter · CWE-20 Pre-auth	Critical9.8	—	0.9%	Jan 31, 2023
30Monitor	CVE-2022-39059No exploit	ChangingTec MegaServiSignAdapter - Path Traversalchangingtec · megaservisignadapter · CWE-22 Pre-auth Path traversal	High7.5	—	1.0%	Jan 31, 2023
29Monitor	CVE-2020-25846No exploit	CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2panorama project · nhiservisignadapter · CWE-601 Pre-auth Open redirect	High7.4	—	1.0%	Dec 31, 2020
29Monitor	CVE-2020-25845No exploit	CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -1panorama project · nhiservisignadapter · CWE-601 Pre-auth Open redirect	High7.4	—	1.0%	Dec 31, 2020
40Plan	CVE-2020-25843No exploit	CHANGING Inc. NHIServiSignAdapter Windows Versions - Heap Overflowpanorama · nhiservisignadapter · CWE-122 Pre-auth Memory safety	Critical9.8	—	2.0%	Dec 31, 2020
30Monitor	CVE-2020-25842No exploit	CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Accesspanorama · nhiservisignadapter · CWE-311 Pre-auth	High7.5	—	0.5%	Dec 31, 2020
39Monitor	CVE-2019-15066No exploit	A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998hinet · gpon firmware pre-auth RCE	Critical9.8	—	1.6%	Oct 17, 2019
30Monitor	CVE-2019-15065No exploit	A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary fileshinet · gpon firmware Pre-auth	High7.5	—	1.2%	Oct 17, 2019
39Monitor	CVE-2019-15064No exploit	HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authenticationhinet · gpon firmware · CWE-306 Pre-auth Auth bypass	Critical9.8	—	1.4%	Oct 17, 2019
30Monitor	CVE-2019-13412No exploit	A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary fileshinet · gpon firmware Pre-auth	High7.5	—	1.2%	Oct 17, 2019
39Monitor	CVE-2019-13411No exploit	A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097hinet · gpon firmware pre-auth RCE	Critical9.8	—	1.3%	Oct 17, 2019

CVE-2023-22900
39Monitor
Thinking Software Technology Co., Ltd. Efence - SQL Injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
thinkingsoftware · efenceJan 31, 2023
CVE-2022-39061
26Monitor
ChangingTec MegaServiSignAdapter - Out-of-bounds Read
MediumCVSS 6.5No exploitEPSS 1%
- Pre-auth
- Memory safety
changingtec · megaservisignadapterJan 31, 2023
CVE-2022-39060
39Monitor
ChangingTec MegaServiSignAdapter - Improper Input Validation
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
changingtec · megaservisignadapterJan 31, 2023
CVE-2022-39059
30Monitor
ChangingTec MegaServiSignAdapter - Path Traversal
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
changingtec · megaservisignadapterJan 31, 2023
CVE-2020-25846
29Monitor
CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -2
HighCVSS 7.4No exploitEPSS 1%
- Pre-auth
- Open redirect
panorama project · nhiservisignadapterDec 31, 2020
CVE-2020-25845
29Monitor
CHANGING Inc. NHIServiSignAdapter Windows Versions - Information Leakage -1
HighCVSS 7.4No exploitEPSS 1%
- Pre-auth
- Open redirect
panorama project · nhiservisignadapterDec 31, 2020
CVE-2020-25843
40Plan
CHANGING Inc. NHIServiSignAdapter Windows Versions - Heap Overflow
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
panorama · nhiservisignadapterDec 31, 2020
CVE-2020-25842
30Monitor
CHANGING Inc. NHIServiSignAdapter Windows Versions - Arbitrary File Access
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
panorama · nhiservisignadapterDec 31, 2020
CVE-2019-15066
39Monitor
A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 6998
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
hinet · gpon firmwareOct 17, 2019
CVE-2019-15065
30Monitor
A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
hinet · gpon firmwareOct 17, 2019
CVE-2019-15064
39Monitor
HiNet GPON firmware version < I040GWR190731 allows a user login to device without any authentication
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
hinet · gpon firmwareOct 17, 2019
CVE-2019-13412
30Monitor
A vulnerability was discovered in HiNet GPON firmware < I040GWR190731 that allows an attacker to read arbitrary files
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
hinet · gpon firmwareOct 17, 2019
CVE-2019-13411
39Monitor
A remote command execution vulnerability was discovered in HiNet GPON firmware < I040GWR190731 port 3097
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
hinet · gpon firmwareOct 17, 2019