Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: kujirahand Component: Nadesiko3 Clear all filters
TI-2022-20688 CVE-2022-42496 · GHSA-7249-8x22-4rg4

OS command injection in kujirahand Nako3edit, editor component of nadesiko3

Priority MEDIUM 53

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02147 Published 2022-12-05 Fixed in 3.3.75 CWE-78
TI-2022-20153 CVE-2022-41777 · GHSA-x2jx-w3wm-9p3p

Improper handling of exceptional conditions in kujirahand Nako3edit, editor component of…

Priority MEDIUM 42

Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01604 Published 2022-12-05 Fixed in 3.3.75 CWE-703
TI-2022-20038 CVE-2022-41642 · GHSA-m8r5-7wf4-63mw

OS command injection in kujirahand Nadesiko3

Priority MEDIUM 53

OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02147 Published 2022-12-05 Fixed in 3.3.69 CWE-78