CVE-2022-36344

CVE-2022-36344 describes an unquoted search path vulnerability in JustSystems JUST Online Update for J-License, bundled with various corporate products (Ichitaro through Pro5 and others). The root cause is an unquoted file path used to start a secondary program from the Windows service, enabling ...

CVE-2017-2154

CVE-2017-2154 concerns an untrusted DLL search path in multiple JustSystems/Hanako-and-related products (Hanako 2015–2017, Hanako Pro 3, JUST Office 3 variants, JUST Government 3, JUST Jump Class 2, JUST Frontier 3, JUST School 6 Premium, and related packages). The underlying issue is insecure lo...