Skip to content
OpenAdvisories

Vendor

NEOJAPAN

19 known vulnerabilities.

Products

desknet's NEO 7 Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R4.0 and earlier, Denbun IMAP version V3.3I R4.0 and earlier) 6 ChatLuck 3 desknet's Web Server 1 Denbun POP version V3.3P R4.0 and earlier 1 Denbun by NEOJAPAN Inc. (Denbun POP version V3.3P R3.0 and earlier, Denbun IMAP version V3.3I R3.0 and earlier) 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-58426

    desknet's NEO V4.0R1.0 to V9.0R2.0 contains a hard-coded cryptographic key, which allows an attacker to create maliciou…

    NEOJAPAN desknet's NEO
  • Medium 4.3
    CVE-2025-58079

    Improper Protection of Alternate Path (CWE-424) in the AppSuite of desknet's NEO V4.0R1.0 to V9.0R2.0 allows an attacke…

    NEOJAPAN desknet's NEO
  • Medium 5.4
    CVE-2025-55072

    Stored cross-site scripting (XSS) vulnerability in desknet's NEO V2.0R1.0 to V9.0R2.0 allow execution of arbitrary Java…

    NEOJAPAN desknet's NEO
  • Medium 4.8
    CVE-2025-54859

    Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary Java…

    NEOJAPAN desknet's NEO
  • Medium 5.4
    CVE-2025-54760

    Stored cross-site scripting (XSS) vulnerability in desknet's NEO V9.0R2.0 and earlier allow execution of arbitrary Java…

    NEOJAPAN desknet's NEO
  • Medium 6.1
    CVE-2025-52583

    Reflected cross-site scripting (XSS) vulnerability in desknet's Web Server allows execution of arbitrary JavaScript in …

    NEOJAPAN desknet's Web Server
  • Medium 5.4
    CVE-2025-24833

    Stored cross-site scripting (XSS) vulnerability in desknet's NEO versions V4.0R1.0–V9.0R2.0 allow execution of arbitrar…

    NEOJAPAN desknet's NEO
  • Medium 6.1
    CVE-2025-58115

    ChatLuck contains a cross-site scripting vulnerability in Guest User Sign-up. If exploited, an arbitrary script may be …

    NEOJAPAN ChatLuck
  • Medium 5.3
    CVE-2025-54461

    ChatLuck contains an insufficient granularity of access control vulnerability in Invitation of Guest Users. If exploite…

    NEOJAPAN ChatLuck
  • Medium 5.4
    CVE-2025-53858

    ChatLuck contains a cross-site scripting vulnerability in Chat Rooms. If exploited, an arbitrary script may be executed…

    NEOJAPAN ChatLuck