Read the docs

kujirahand

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

kujirahand records in CISA KEV

No kujirahand vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Konawiki 5 records MEDIUM Nadesiko3 3 records MEDIUM

Records

5 records in Konawiki · all components

TI-2021-03947 CVE-2021-20721 · GHSA-8438-2753-v3v3

Unrestricted file upload in kujirahand KonaWiki2

Priority MEDIUM 45

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01522 Published 2021-05-20 Fixed in 2.2.4 CWE-434
TI-2021-03946 CVE-2021-20720 · GHSA-92mq-hq5f-7rrr

SQL injection in kujirahand KonaWiki2

Priority MEDIUM 45

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01317 Published 2021-05-20 Fixed in 2.2.4 CWE-89
TI-2020-04582 CVE-2020-5613 · GHSA-hqq9-hv7p-jh7g

Cross-site scripting in kujirahand KonaWiki

Priority LOW 29

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01082 Published 2020-07-29 No fix listed CWE-79
TI-2020-04581 CVE-2020-5612 · GHSA-p38g-jh93-54hr

Cross-site scripting in kujirahand KonaWiki

Priority LOW 29

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0106 Published 2020-07-29 No fix listed CWE-79
TI-2020-04583 CVE-2020-5614 · GHSA-j8w5-rfgv-wq62

Path traversal in kujirahand KonaWiki

Priority LOW 28

Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02212 Published 2020-07-29 No fix listed CWE-22
Open these records in search →