Skygroup vulnerabilities
24 vulnerabilities
Known vulnerabilities in Skygroup products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 18 products.
Products
18- Skysea Client View9 vulnerabilities
- Agrofood1 vulnerabilities
- Druco1 vulnerabilities
- Edr Plus Pack1 vulnerabilities
- Edr Plus Pack Cloud1 vulnerabilities
- Enzy1 vulnerabilities
- Gostore1 vulnerabilities
- Jaroti1 vulnerabilities
- Loobek1 vulnerabilities
- Miti1 vulnerabilities
- Mydecor1 vulnerabilities
- Mymedi1 vulnerabilities
- Nooni1 vulnerabilities
- Reebox1 vulnerabilities
- Sanzo1 vulnerabilities
- Skymec It Manager1 vulnerabilities
- Upstore1 vulnerabilities
- Yobazar1 vulnerabilities
CVE-2021-20616sky co., ltd.skysea client view+1
EPSS score0.33%
Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.CVE-2016-7836sky co., ltd.skysea client view+1KEVEPSS score19.23%
SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.CVE-2025-54055skygroupdruco+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Druco druco allows Reflected XSS.This issue affects Druco: from n/a through <= 1.5.2.CVE-2025-59556skygroupgostore+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup GoStore gostore allows Reflected XSS.This issue affects GoStore: from n/a through < 1.6.4.CVE-2025-48296skygroupupstore+1EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup UpStore upstore allows Reflected XSS.This issue affects UpStore: from n/a through <= 1.7.0.CVE-2025-58964skygroupenzy+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Enzy enzy allows Reflected XSS.This issue affects Enzy: from n/a through < 1.6.4.CVE-2020-5617sky co., ltd.skysea client view+1EPSS score0.34%
Privilege escalation vulnerability in SKYSEA Client View Ver.12.200.12n to 15.210.05f allows an attacker to obtain unauthorized privileges and modify/obtain sensitive information or perform unintended operations via unspecified vectors.CVE-2024-21805sky co.,ltd.skysea client view+1EPSS score0.24%
Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is installed. In case the file is a specially crafted DLL file, arbitrary code may be executed with SYSTEM privilege.CVE-2024-41726sky co.,ltd.skysea client view+1EPSS score0.62%
Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product's Windows client is installed.CVE-2024-41139sky co.,ltd.skysea client view+1EPSS score0.18%
Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privilege.CVE-2024-41143sky co.,ltd.skysea client view+1EPSS score0.12%
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.CVE-2024-24964sky co.,ltd.skysea client view+1EPSS score0.41%
Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed.CVE-2026-39454sky co.,ltd.skymec it manager+3EPSS score0.15%
SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configure the installation folder with improper file access permission settings. A non-administrative user may manipulate and/or place arbitrary files within the installation folder of the product. As a result, arbitrary code may be executed with the administrative privilege.CVE-2026-25353skygroupnooni+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Nooni nooni allows Reflected XSS.This issue affects Nooni: from n/a through < 1.5.1.CVE-2026-25349skygrouploobek+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Loobek loobek allows Reflected XSS.This issue affects Loobek: from n/a through < 1.5.2.CVE-2026-25354skygroupreebox+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Reebox reebox allows Reflected XSS.This issue affects Reebox: from n/a through < 1.4.8.CVE-2026-25350skygroupmiti+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Miti miti allows Reflected XSS.This issue affects Miti: from n/a through < 1.5.3.CVE-2026-25356skygroupyobazar+1EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Yobazar yobazar allows Reflected XSS.This issue affects Yobazar: from n/a through < 1.6.7.CVE-2026-25304skygroupjaroti+1EPSS score0.18%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Jaroti jaroti allows Reflected XSS.This issue affects Jaroti: from n/a through < 1.4.8.CVE-2026-25355skygroupsanzo+1EPSS score0.16%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in skygroup Sanzo sanzo allows Stored XSS.This issue affects Sanzo: from n/a through < 2.4.3.