Kujirahand
10 CVEs across 6 Kujirahand products. Browse Kujirahand vulnerabilities, severities, and proof-of-concept exploits.
Kujirahand products with known CVEs
Kujirahand CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-55671 | High | 7.8 | 2025-09-05 | Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with t… |
CVE-2025-55037 | Critical | 9.8 | 2025-09-05 | Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnera… |
CVE-2022-42496 | Critical | 9.8 | 2022-12-05 | OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of th… |
CVE-2022-41777 | High | 7.5 | 2022-12-05 | Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote… |
CVE-2022-41642 | Critical | 9.8 | 2022-12-05 | OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing co… |
CVE-2021-20721 | Critical | 9.8 | 2021-05-20 | KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code… |
CVE-2021-20720 | Critical | 9.8 | 2021-05-20 | SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the informat… |
CVE-2020-5614 | Medium | 5.3 | 2020-07-29 | Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. |
CVE-2020-5613 | Medium | 6.1 | 2020-07-29 | Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. |
CVE-2020-5612 | Medium | 6.1 | 2020-07-29 | Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL. |