Vulnerabilidades de NEOJAPAN Inc.
CVEs publicadas que afetam produtos de NEOJAPAN Inc.: 10 registro(s), com severidade, exploração e correções.
CVE-2025-58426
Média · 4.3
CWE-321 16/10/2025
desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows…
desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create malicious AppSuite applications.
CVE-2025-58079
Média · 4.3
CWE-424 16/10/2025
Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO…
Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacker to create malicious AppSuite applications.
CVE-2025-55072
Média · 5.4
CWE-79 16/10/2025
Cross-site Scripting (XSS) em NEOJAPAN Inc. desknet's NEO
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-54859
Média · 4.8
CWE-79 16/10/2025
Cross-site Scripting (XSS) em NEOJAPAN Inc. desknet's NEO
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-54760
Média · 5.4
CWE-79 16/10/2025
Cross-site Scripting (XSS) em NEOJAPAN Inc. desknet's NEO
Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-52583
Média · 6.1
CWE-79 16/10/2025
Cross-site Scripting (XSS) em NEOJAPAN Inc. desknet's Web Server
Reflected cross-site scripting (XSS) vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-24833
Média · 5.4
CWE-79 16/10/2025
Cross-site Scripting (XSS) em NEOJAPAN Inc. desknet's NEO
Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrary JavaScript in a user’s web browser.
CVE-2025-58115
Média · 6.1
CWE-79 16/10/2025
Cross-site Scripting (XSS) em NEOJAPAN Inc. ChatLuck
ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.
CVE-2025-54461
Média · 5.3
CWE-1220 16/10/2025
ChatLuck contains an insufficient granularity of access control vulnerability in…
ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploited, an uninvited guest user may register itself as a guest user.
CVE-2025-53858
Média · 5.4
CWE-79 16/10/2025
Cross-site Scripting (XSS) em NEOJAPAN Inc. ChatLuck
ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed on the web browser of the user who is accessing the product.