Kujirahand vulnerabilities
We track 5 vulnerabilities in Kujirahand products across 4 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2025.
Latest Kujirahand vulnerabilities
- 8.5 High severity
TkEasyGUI: Uncontrolled Search Path Element
Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program.
- 9.3 Critical severity
TkEasyGUI: Improper Neutralization of Special Elements used in an OS Command
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, an arbitrary OS command may be executed by a remote unauthenticated attacker if
- 9.8 Critical severity
Nako3edit, editor component of nadesiko3 (PC…: Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.
- 7.5 High severity
Nako3edit, editor component of nadesiko3 (PC…: Improper Check or Handling of Exceptional Conditions
Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to
- 9.8 Critical severity
Nadesiko3 (PC Version): Improper Neutralization of Special Elements used in an OS Command
OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.