Read the docs

kujirahand

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

kujirahand records in CISA KEV

No kujirahand vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Konawiki 5 records MEDIUM Nadesiko3 3 records MEDIUM

Records

10 records

TI-2025-34729 CVE-2025-55037 · GHSA-hfrj-3w3g-jv32

OS command injection in kujirahand TkEasyGUI

Priority MEDIUM 53

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02339 Published 2025-09-05 Fixed in v1.0.22, 1.0.22 CWE-78
TI-2022-20688 CVE-2022-42496 · GHSA-7249-8x22-4rg4

OS command injection in kujirahand Nako3edit, editor component of nadesiko3

Priority MEDIUM 53

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02147 Published 2022-12-05 Fixed in 3.3.75 CWE-78
TI-2022-20038 CVE-2022-41642 · GHSA-m8r5-7wf4-63mw

OS command injection in kujirahand Nadesiko3

Priority MEDIUM 53

OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02147 Published 2022-12-05 Fixed in 3.3.69 CWE-78
TI-2021-03947 CVE-2021-20721 · GHSA-8438-2753-v3v3

Unrestricted file upload in kujirahand KonaWiki2

Priority MEDIUM 45

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01522 Published 2021-05-20 Fixed in 2.2.4 CWE-434
TI-2021-03946 CVE-2021-20720 · GHSA-92mq-hq5f-7rrr

SQL injection in kujirahand KonaWiki2

Priority MEDIUM 45

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01317 Published 2021-05-20 Fixed in 2.2.4 CWE-89
TI-2022-20153 CVE-2022-41777 · GHSA-x2jx-w3wm-9p3p

Improper handling of exceptional conditions in kujirahand Nako3edit, editor component of…

Priority MEDIUM 42

Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01604 Published 2022-12-05 Fixed in 3.3.75 CWE-703
TI-2025-35102 CVE-2025-55671 · GHSA-ph2w-cx28-vhrq

Uncontrolled search path in kujirahand TkEasyGUI

Priority LOW 38

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00164 Published 2025-09-05 Fixed in v1.0.22, 1.0.22 CWE-427
TI-2020-04582 CVE-2020-5613 · GHSA-hqq9-hv7p-jh7g

Cross-site scripting in kujirahand KonaWiki

Priority LOW 29

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01082 Published 2020-07-29 No fix listed CWE-79
TI-2020-04581 CVE-2020-5612 · GHSA-p38g-jh93-54hr

Cross-site scripting in kujirahand KonaWiki

Priority LOW 29

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0106 Published 2020-07-29 No fix listed CWE-79
TI-2020-04583 CVE-2020-5614 · GHSA-j8w5-rfgv-wq62

Path traversal in kujirahand KonaWiki

Priority LOW 28

Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02212 Published 2020-07-29 No fix listed CWE-22
Open these records in search →