https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 20:00:16 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-18354 EUVD-2026-18354 https://cve.radiocsirt.org/vuln/euvd-2026-18354 https://cve.radiocsirt.org/vuln/fkie_cve-2022-36344 <p>An unquoted search path vulnerability exists in &#39;JustSystems JUST Online Update for J-License&#39; bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed with the privilege of the Windows service if it is placed in a certain path. Affected products are bundled with the following product series: Office and Office Integrated Software, ATOK, Hanako, JUST PDF, Shuriken, Homepage Builder, JUST School, JUST Smile Class, JUST Smile, JUST Frontier, JUST Jump, and Tri-De DetaProtect.</p> <p>An unquoted search path vulnerability exists in &#39;JustSystems JUST Online Update for J-License&#39; bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed with the privilege of the Windows service if it is placed in a certain path. Affected products are bundled with the following product series: Office and Office Integrated Software, ATOK, Hanako, JUST PDF, Shuriken, Homepage Builder, JUST School, JUST Smile Class, JUST Smile, JUST Frontier, JUST Jump, and Tri-De DetaProtect.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-36344 https://cve.radiocsirt.org/vuln/ghsa-xqgw-r8h6-587w <p>An unquoted search path vulnerability exists in &#39;JustSystems JUST Online Update for J-License&#39; bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed with the privilege of the Windows service if it is placed in a certain path. Affected products are bundled with the following product series: Office and Office Integrated Software, ATOK, Hanako, JUST PDF, Shuriken, Homepage Builder, JUST School, JUST Smile Class, JUST Smile, JUST Frontier, JUST Jump, and Tri-De DetaProtect.</p> <p>An unquoted search path vulnerability exists in &#39;JustSystems JUST Online Update for J-License&#39; bundled with multiple products for corporate users as in Ichitaro through Pro5 and others. Since the affected product starts another program with an unquoted file path, a malicious file may be executed with the privilege of the Windows service if it is placed in a certain path. Affected products are bundled with the following product series: Office and Office Integrated Software, ATOK, Hanako, JUST PDF, Shuriken, Homepage Builder, JUST School, JUST Smile Class, JUST Smile, JUST Frontier, JUST Jump, and Tri-De DetaProtect.</p> https://cve.radiocsirt.org/vuln/ghsa-xqgw-r8h6-587w https://cve.radiocsirt.org/vuln/gsd-2022-36344 gsd-2022-36344 https://cve.radiocsirt.org/vuln/gsd-2022-36344 https://cve.radiocsirt.org/vuln/jvndb-2022-000061 <p>&#34;JustSystems JUST Online Update for J-License&#34; is bundled with multiple products for corporate users provided by JustSystems Corporation, as in Ichitaro through Pro5 and others, and it is registered as a Windows service. &#34;JustSystems JUST Online Update for J-License&#34; starts another program with an unquoted file path (CWE-428). Hiroki MATSUKUMA of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>&#34;JustSystems JUST Online Update for J-License&#34; is bundled with multiple products for corporate users provided by JustSystems Corporation, as in Ichitaro through Pro5 and others, and it is registered as a Windows service. &#34;JustSystems JUST Online Update for J-License&#34; starts another program with an unquoted file path (CWE-428). Hiroki MATSUKUMA of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-000061