Approved changes feed: RSS · Atom

cpe:2.3:a:kujirahand:nadesiko3:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKujirahand (54b1e078-cc49-533e-9b6e-4239d6796cbf)
ProductNadesiko3 (04051b78-07f4-56d3-9ca0-d7bc673ad710)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/kujirahand/nadesiko3 purl2cpe 2026-06-01 10:15:08.390103
pkg:npm/nadesiko3 purl2cpe 2026-06-01 10:15:08.390105

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-42496 vulnerable 2026-06-08 05:49:30.115410 Details available
OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.
Published: 2022-12-05T00:00:00.000Z
Updated: 2025-04-24T14:26:18.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41777 vulnerable 2026-06-08 05:48:30.947448 Details available
Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to crash.
Published: 2022-12-05T00:00:00.000Z
Updated: 2025-04-24T14:32:18.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-41642 vulnerable 2026-06-08 05:48:30.693878 Details available
OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.
Published: 2022-12-05T00:00:00.000Z
Updated: 2025-04-24T14:32:55.446Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.