Read the docs

DOS Co., Ltd.

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

DOS Co., Ltd. records in CISA KEV

No DOS Co., Ltd. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Rakuraku Pc Cloud Agent 3 records MEDIUM Ss1 3 records MEDIUM

Records

11 records

TI-2023-08600 CVE-2023-22336 · GHSA-34gr-jxh4-rxfv

Path traversal in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 51

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2023-03-05 No fix listed CWE-22
TI-2023-08607 CVE-2023-22344 · GHSA-63wr-jpff-c77r

Hard-coded credentials in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 50

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00861 Published 2023-03-05 No fix listed CWE-798
TI-2025-34523 CVE-2025-54762 · GHSA-9xff-xvpg-rrgv

Unrestricted file upload in DOS Co., Ltd. SS1

Priority MEDIUM 49

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00535 Published 2025-08-28 No fix listed CWE-434
TI-2025-33826 CVE-2025-53970 · GHSA-v97c-whj6-p72c

Unrestricted file upload in DOS Co., Ltd. SS1

Priority MEDIUM 49

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00535 Published 2025-08-28 No fix listed CWE-434
TI-2025-35915 CVE-2025-58072 · GHSA-26qj-5g3c-qwm4

Path traversal in DOS Co., Ltd. SS1

Priority MEDIUM 45

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00624 Published 2025-08-28 No fix listed CWE-22
TI-2023-08599 CVE-2023-22335 · GHSA-44rp-5567-c4w9

Improper access control in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 40

Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00742 Published 2023-03-05 No fix listed CWE-284
TI-2025-33347 CVE-2025-53396 · GHSA-q7q6-fxh4-947w

Incorrect permission assignment in DOS Co., Ltd. SS1

Priority LOW 33

Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges…

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00122 Published 2025-08-28 No fix listed CWE-732
TI-2025-34573 CVE-2025-54819 · GHSA-f6pf-vhhj-w4pg

Path traversal in DOS Co., Ltd. SS1

Priority LOW 32

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00472 Published 2025-08-28 No fix listed CWE-22
Open these records in search →