Vulnerabilities

TI-2025-35102 CVE-2025-55671 · GHSA-ph2w-cx28-vhrq

Uncontrolled search path in kujirahand TkEasyGUI

LOW 38

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22.

CVSS 4.0HIGH 8.5 Local No auth User interaction EPSS 0.00164 Published 2025-09-05 Fixed in v1.0.22, 1.0.22 CWE-427

TI-2025-34729 CVE-2025-55037 · GHSA-hfrj-3w3g-jv32

OS command injection in kujirahand TkEasyGUI

MEDIUM 53

Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02339 Published 2025-09-05 Fixed in v1.0.22, 1.0.22 CWE-78

TI-2022-20688 CVE-2022-42496 · GHSA-7249-8x22-4rg4

OS command injection in kujirahand Nako3edit, editor component of nadesiko3

MEDIUM 53

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02147 Published 2022-12-05 Fixed in 3.3.75 CWE-78

TI-2022-20153 CVE-2022-41777 · GHSA-x2jx-w3wm-9p3p

Improper handling of exceptional conditions in kujirahand Nako3edit, editor component of…

MEDIUM 42

Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01604 Published 2022-12-05 Fixed in 3.3.75 CWE-703

TI-2022-20038 CVE-2022-41642 · GHSA-m8r5-7wf4-63mw

OS command injection in kujirahand Nadesiko3

MEDIUM 53

OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02147 Published 2022-12-05 Fixed in 3.3.69 CWE-78

TI-2021-03947 CVE-2021-20721 · GHSA-8438-2753-v3v3

Unrestricted file upload in kujirahand KonaWiki2

MEDIUM 45

KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01522 Published 2021-05-20 Fixed in 2.2.4 CWE-434

TI-2021-03946 CVE-2021-20720 · GHSA-92mq-hq5f-7rrr

SQL injection in kujirahand KonaWiki2

MEDIUM 45

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01317 Published 2021-05-20 Fixed in 2.2.4 CWE-89

TI-2020-04583 CVE-2020-5614 · GHSA-j8w5-rfgv-wq62

Path traversal in kujirahand KonaWiki

LOW 28

Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02212 Published 2020-07-29 No fix listed CWE-22

TI-2020-04582 CVE-2020-5613 · GHSA-hqq9-hv7p-jh7g

Cross-site scripting in kujirahand KonaWiki

LOW 29

Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01082 Published 2020-07-29 No fix listed CWE-79

TI-2020-04581 CVE-2020-5612 · GHSA-p38g-jh93-54hr

Cross-site scripting in kujirahand KonaWiki

LOW 29

Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0106 Published 2020-07-29 No fix listed CWE-79

Vulnerabilities

Filters