PatchTheCVE: kujirahandhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-42496: OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earliehttps://patchthecve.com/cve/CVE-2022-42496.htmlhttps://patchthecve.com/cve/CVE-2022-42496.htmlWed, 17 Jun 2026 05:05:02 +0000CRITICAL 9.8: OS command injection vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to obtain appkey of the product and execute an arbitrary OS command on the product.CVE-2022-41777: Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3https://patchthecve.com/cve/CVE-2022-41777.htmlhttps://patchthecve.com/cve/CVE-2022-41777.htmlWed, 17 Jun 2026 05:03:48 +0000HIGH 7.5: Improper check or handling of exceptional conditions vulnerability in Nako3edit, editor component of nadesiko3 (PC Version) v3.3.74 and earlier allows a remote attacker to inject an invalid value to decodeURIComponent of nako3edit, which may lead the server to crash.CVE-2022-41642: OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to ehttps://patchthecve.com/cve/CVE-2022-41642.htmlhttps://patchthecve.com/cve/CVE-2022-41642.htmlWed, 17 Jun 2026 05:03:33 +0000CRITICAL 9.8: OS command injection vulnerability in Nadesiko3 (PC Version) v3.3.61 and earlier allows a remote attacker to execute an arbitrary OS command when processing compression and decompression on the product.CVE-2021-20721: KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectorshttps://patchthecve.com/cve/CVE-2021-20721.htmlhttps://patchthecve.com/cve/CVE-2021-20721.htmlWed, 17 Jun 2026 03:34:19 +0000CRITICAL 9.8: KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.CVE-2021-20720: SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrhttps://patchthecve.com/cve/CVE-2021-20720.htmlhttps://patchthecve.com/cve/CVE-2021-20720.htmlWed, 17 Jun 2026 03:34:19 +0000CRITICAL 9.8: SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.CVE-2020-5614: Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary filehttps://patchthecve.com/cve/CVE-2020-5614.htmlhttps://patchthecve.com/cve/CVE-2020-5614.htmlWed, 17 Jun 2026 03:21:41 +0000MEDIUM 5.3: Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.CVE-2020-5613: Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrahttps://patchthecve.com/cve/CVE-2020-5613.htmlhttps://patchthecve.com/cve/CVE-2020-5613.htmlWed, 17 Jun 2026 03:21:41 +0000MEDIUM 6.1: Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.CVE-2020-5612: Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrahttps://patchthecve.com/cve/CVE-2020-5612.htmlhttps://patchthecve.com/cve/CVE-2020-5612.htmlWed, 17 Jun 2026 03:21:41 +0000MEDIUM 6.1: Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.