skygroup Schwachstellen (CVE)

7.8Hoch

CVE-2026-39454 vor 6 Monaten

Sky Co.,LTD. SKYSEA Client View; Sky Co.,LTD. SKYMEC IT Manager

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the prod…

7.1Hoch

CVE-2026-25356 vor 7 Monaten

WordPress Yobazar theme < 1.6.7 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Yobazar

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Yobazar yobazar allows Reflected XSS.This issue affects Yobazar: from n/a through < 1.6.7.

6.5Mittel

CVE-2026-25355 vor 7 Monaten

WordPress Sanzo theme < 2.4.3 - Cross Site Scripting (XSS) vulnerability

skygroup Sanzo

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Sanzo sanzo allows Stored XSS.This issue affects Sanzo: from n/a through < 2.4.3.

7.1Hoch

CVE-2026-25354 vor 7 Monaten

WordPress Reebox theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Reebox

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/a through < 1.4.8.

7.1Hoch

CVE-2026-25353 vor 7 Monaten

WordPress Nooni theme < 1.5.1 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Nooni

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a through < 1.5.1.

7.1Hoch

CVE-2026-25352 vor 7 Monaten

WordPress MyDecor theme < 1.5.9 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup MyDecor

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyDecor mydecor allows Reflected XSS.This issue affects MyDecor: from n/a through < 1.5.9.

7.1Hoch

CVE-2026-25351 vor 7 Monaten

WordPress MyMedi theme < 1.7.7 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup MyMedi

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup MyMedi mymedi allows Reflected XSS.This issue affects MyMedi: from n/a through < 1.7.7.

7.1Hoch

CVE-2026-25350 vor 7 Monaten

WordPress Miti theme < 1.5.3 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Miti

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Miti miti allows Reflected XSS.This issue affects Miti: from n/a through < 1.5.3.

7.1Hoch

CVE-2026-25349 vor 7 Monaten

WordPress Loobek theme < 1.5.2 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Loobek

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Loobek loobek allows Reflected XSS.This issue affects Loobek: from n/a through < 1.5.2.

7.1Hoch

CVE-2026-25304 vor 7 Monaten

WordPress Jaroti theme < 1.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

skygroup Jaroti

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.This issue affects Jaroti: from n/a through < 1.4.8.

7.1Hoch

CVE-2026-27332 vor 8 Monaten

WordPress Agrofood theme < 1.4.0 - Cross Site Scripting (XSS) vulnerability

skygroup Agrofood

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Agrofood agrofood allows Reflected XSS.This issue affects Agrofood: from n/a through < 1.4.0.

7.1Hoch

CVE-2025-59556 vor 1 Jahr

WordPress GoStore theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability

skygroup GoStore

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.

7.1Hoch

CVE-2025-58964 vor 1 Jahr

WordPress Enzy theme < 1.6.4 - Cross Site Scripting (XSS) vulnerability

skygroup Enzy

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.

7.1Hoch

CVE-2025-48296 vor 1 Jahr

WordPress UpStore <= 1.7.0 - Cross Site Scripting (XSS) Vulnerability

skygroup UpStore

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup UpStore upstore allows Reflected XSS.This issue affects UpStore: from n/a through <= 1.7.0.

7.1Hoch

CVE-2025-54055 vor 1 Jahr

WordPress Druco <= 1.5.2 - Cross Site Scripting (XSS) Vulnerability

skygroup Druco

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through <= 1.5.2.

3.3Niedrig

CVE-2023-39341 vor 3 Jahren

ffri dual safe; ffri ffri yarai; soliton infotrace mark ii malware protection; soliton zerona

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and …

9.8Kritisch

CVE-2016-7836 KEV vor 9 Jahren

SKYSEA Client View Improper Authentication Vulnerability

Sky Co., LTD. SKYSEA Client View

SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.

19%EPSS