Kujirahand

10 CVEs across 6 Kujirahand products. Browse Kujirahand vulnerabilities, severities, and proof-of-concept exploits.

Kujirahand products with known CVEs

ProductCVEs
Konawiki5
Nadesiko33
Konawiki22
Nako3edit, Editor Component Of Nadesiko3 (Pc Version)2
Tkeasygui2
Nadesiko3 (Pc Version)1
Kujirahand CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-55671High7.82025-09-05Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with t…
CVE-2025-55037Critical9.82025-09-05Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnera…
CVE-2022-42496Critical9.82022-12-05OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of th…
CVE-2022-41777High7.52022-12-05Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote…
CVE-2022-41642Critical9.82022-12-05OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing co…
CVE-2021-20721Critical9.82021-05-20KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code…
CVE-2021-20720Critical9.82021-05-20SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the informat…
CVE-2020-5614Medium5.32020-07-29Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2020-5613Medium6.12020-07-29Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.
CVE-2020-5612Medium6.12020-07-29Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.