Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

17 records

Vendor: Sky Co., LTD. Clear all filters
TI-2026-47850 CVE-2026-68062 · GHSA-xfqq-c6x5-hw96

Path traversal in SKYSEA Client View

Priority LOW 29

SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability.

CVSS 4.0MEDIUM 5.8 Network Low privileges No interaction EPSS 0.00654 Published 2026-08-25 No fix listed CWE-22
TI-2026-47060 CVE-2026-66109 · GHSA-w323-mx8p-gxh5

Missing authorization in SKYSEA Client View

Priority LOW 38

A missing authorization vulnerability exists in SKYSEA Client View and SKYMEC IT Manager.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00161 Published 2026-08-25 No fix listed CWE-862
TI-2026-48477 CVE-2026-68960 · GHSA-g35g-c954-r7h2

Stack-based buffer overflow in SKYSEA Client View

Priority LOW 29

A stack-based buffer overflow vulnerability exists in SKYSEA Client View and SKYMEC IT Manager.

CVSS 4.0MEDIUM 5.8 Network Low privileges No interaction EPSS 0.0061 Published 2026-08-25 No fix listed CWE-121
TI-2026-48955 CVE-2026-69665 · GHSA-7xw9-h45h-hh7w

Incorrect default permissions in SKYSEA Client View

Priority LOW 38

SKYSEA Client View and SKYMEC IT Manager contain an issue with incorrect default permissions.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00161 Published 2026-08-25 No fix listed CWE-276
TI-2024-27259 CVE-2024-40895 · GHSA-3cmr-mvgm-pmfq

OS command injection in FFRI AMC

Priority LOW 31

FFRI AMC versions 3.4.0 to 3.5.3 and some OEM products that implement/bundle FFRI AMC versions 3.4.0 to 3.5.3 allow a remote unauthenticated attacker to execute arbitrary OS commands when certain conditions are met in an…

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00465 Published 2024-07-30 No fix listed CWE-78
TI-2024-27785 CVE-2024-41726 · GHSA-vh6h-g733-6v5h

Path traversal in SKYSEA Client View

Priority LOW 36

Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00624 Published 2024-07-29 No fix listed CWE-22
TI-2024-27493 CVE-2024-41143 · GHSA-4pmw-7j2g-cfp7

Origin validation error in SKYSEA Client View

Priority LOW 33

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00117 Published 2024-07-29 No fix listed CWE-346
TI-2024-14484 CVE-2024-21805 · GHSA-7rf7-fr54-x6c7

Improper access control in SKYSEA Client View

Priority LOW 36

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00236 Published 2024-03-12 No fix listed CWE-284
TI-2023-20480 CVE-2023-39341 · GHSA-39xp-m58q-6r58

Improper handling of exceptional conditions in FFRI yarai

Priority LOW 16

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00289 Published 2023-08-09 No fix listed CWE-755
TI-2021-03843 CVE-2021-20616 · GHSA-qrhf-q88m-c43r

Uncontrolled search path in SKYSEA Client View

Priority LOW 34

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00325 Published 2021-01-13 No fix listed CWE-427
TI-2020-04586 CVE-2020-5617 · GHSA-wwjw-pff4-pg5g

Improper privilege management in SKYSEA Client View

Priority LOW 34

Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges and modify/obtain sensitive information or perform unintended operations via unsp…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00339 Published 2020-08-04 No fix listed CWE-269
TI-2016-06585 CVE-2016-7836 · GHSA-6gc8-5v43-5g2x

Improper authentication in SKYSEA Client View

Priority CRITICAL 100KEV

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.1923 Published 2017-06-09 No fix listed CWE-287