Most recent entries from all

EUVD-2026-234886

fkie_cve-2022-42496

OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.

GHSA-7249-8x22-4rg4 — nadesiko3 vulnerable to OS Command Injection

Affected: npm: nadesiko3

gsd-2022-42496

jvndb-2022-000082

Nadesiko3 provided by kujirahand contains multiple vulnerabilities listed below. <ul> <li>OS command injection vulnerability in processing compression and decompression (CWE-78) - CVE-2022-41642 </li> <li>Improper check or handling of exceptional conditions in nako3edit (CWE-703) - CVE-2022-41777 </li> <li>OS command injection vulnerability via "file" parameter in nako3edit (CWE-78) - CVE-2022-42496 </li> </ul> Satoki Tsuji reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.