Most recent entries from all

EUVD-2026-221121

fkie_cve-2023-22336

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an arbitrary directory. As a result of exploiting this vulnerability with CVE-2023-22335 and CVE-2023-22344 vulnerabilities together, it may allow a remote attacker to execute an arbitrary code with SYSTEM privileges by sending a specially crafted script to the affected device.

GHSA-34gr-jxh4-rxfv

gsd-2023-22336

jvndb-2023-000021

SS1 is asset management software and Rakuraku PC Cloud is cloud-based asset management service. SS1 and Rakuraku PC Cloud Agent contain multiple vulnerabilities listed below. <ul><li>Improper Access Control (CWE-284) - CVE-2023-22335</li><li>Path Traversal (CWE-22) - CVE-2023-22336</li><li>Use of Hard-coded Credentials (CWE-798) - CVE-2023-22344</li></ul> Denis Faiustov, and Ruslan Sayfiev of GMO Cyber Security by IERAE reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.