Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: DOS Co., Ltd. Clear all filters
TI-2025-35915 CVE-2025-58072 · GHSA-26qj-5g3c-qwm4

Path traversal in DOS Co., Ltd. SS1

Priority MEDIUM 45

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00624 Published 2025-08-28 No fix listed CWE-22
TI-2025-34573 CVE-2025-54819 · GHSA-f6pf-vhhj-w4pg

Path traversal in DOS Co., Ltd. SS1

Priority LOW 32

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier).

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00472 Published 2025-08-28 No fix listed CWE-22
TI-2025-34523 CVE-2025-54762 · GHSA-9xff-xvpg-rrgv

Unrestricted file upload in DOS Co., Ltd. SS1

Priority MEDIUM 49

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00535 Published 2025-08-28 No fix listed CWE-434
TI-2025-33826 CVE-2025-53970 · GHSA-v97c-whj6-p72c

Unrestricted file upload in DOS Co., Ltd. SS1

Priority MEDIUM 49

SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00535 Published 2025-08-28 No fix listed CWE-434
TI-2025-33347 CVE-2025-53396 · GHSA-q7q6-fxh4-947w

Incorrect permission assignment in DOS Co., Ltd. SS1

Priority LOW 33

Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges…

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00122 Published 2025-08-28 No fix listed CWE-732
TI-2023-08607 CVE-2023-22344 · GHSA-63wr-jpff-c77r

Hard-coded credentials in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 50

Use of hard-coded credentials vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to obtain the password of the debug tool and execute it.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00861 Published 2023-03-05 No fix listed CWE-798
TI-2023-08600 CVE-2023-22336 · GHSA-34gr-jxh4-rxfv

Path traversal in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 51

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01099 Published 2023-03-05 No fix listed CWE-22
TI-2023-08599 CVE-2023-22335 · GHSA-44rp-5567-c4w9

Improper access control in DOS Co., Ltd. SS1 and Rakuraku PC Cloud

Priority MEDIUM 40

Improper access control vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to bypass access restriction and download an arbitrary file of the directo…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00742 Published 2023-03-05 No fix listed CWE-284