CVE-2023-35034

The CVE-2023-35034 entry affects Atos Unify OpenScape 4000 Assistant and Manager. Vulnerable components are OpenScape 4000 Assistant (versions prior to V10 R1.42.0 and prior to V10 R1.34.8) and OpenScape 4000 Manager (same version ranges). The issue enables remote code execution by unauthenticate...

PT-2023-25106 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions prior to V10 R1.42.0 and prior to V10 R1.34.8 Atos Unify OpenScape 4000 Manager versions prior to V10 R1.42.0 and prior to V10 R1.34.8 Description: The issue allows remote code execution by...

Atos Unify OpenScape 4000 命令注入漏洞

Atos Unify OpenScape 4000 is an enterprise IP communications platform from Atos France. A security vulnerability exists in Atos Unify OpenScape 4000 Assistant that originates from allowing command injection by an authenticated user...

Atos Unify OpenScape 4000 安全漏洞

Atos Unify OpenScape 4000 is an enterprise IP communications platform from Atos France. A security vulnerability exists in Atos Unify OpenScape 4000 Assistant that originates from allowing unauthenticated users to remotely execute code...

CVE-2023-32673: Undefined Security Weakness

Certain versions of HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware are potentially vulnerable to elevation of privilege...

CVE-2023-35032: Improper Neutralization of Special Elements used in a Command

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.0 and V10 R1.34.8 and Manager V10 R1 before V10 R1.42.0 and V10 R1.34.8 allow command injection by authenticated users, aka OSFOURK-23554...

CVE-2023-35033

CVE-2023-35033 affects Atos Unify OpenScape 4000: specifically Assistant V10 R1 before R1.42.0 and R1.34.8, Assistant V10 R0, Manager V10 R1 before R1.42.0 and R1.34.8, and Manager V10 R0. The description indicates a command injection vulnerability that can be exploited by authenticated users. Th...

PT-2023-25107 · Atos · Atos Unify Openscape 4000 Assistant +1

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape 4000 Assistant versions V10 R0 through V10 R1.34.7 Atos Unify OpenScape 4000 Assistant versions V10 R1 through V10 R1.41.9 Atos Unify OpenScape 4000 Manager versions V10 R0 through V10 R1.34.7 Atos Unify OpenScape 4000...

CVE-2023-3098

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restoreallsoundfile. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

CVE-2023-3098

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restoreallsoundfile. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

Improper access control

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function deletefile in the library dbus.SystemBus of the component Arbitrary File Handler. The manipulation leads to improper access controls. It is possible to launch...

Path traversal

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restoreallsoundfile. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

CVE-2023-3099

CVE-2023-3099 affects KylinSoft youker-assistant on KylinOS. The vulnerability is in the delete_file function of the dbus.SystemBus component within Arbitrary File Handler, causing improper access controls and enabling a local attack. Exploitation is local, with a high impact on integrity/availab...

CVE-2023-3098

CVE-2023-3098 affects KylinSoft youker-assistant on KylinOS. The vulnerable component is the restore_all_sound_file function, which allows path traversal (e.g., ../filedir) with local access. The issue has been publicly disclosed; upgrading to 3.0.2-0kylin6k70-23 addresses the vulnerability.

CVE-2023-3098 KylinSoft youker-assistant restore_all_sound_file path traversal

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restoreallsoundfile. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

CVE-2023-3098: Path Traversal: '../filedir'

A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restoreallsoundfile. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used...

KylinSoft youker-assistant 路径遍历漏洞

KylinSoft youker-assistant is a system management and configuration tool from KylinSoft China. A security vulnerability exists in KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23. An attacker could exploit the vulnerability to access files and directories stored outside of the web...

PT-2023-23100 · Kylinsoft · Youker-Assistant

Name of the Vulnerable Software and Affected Versions: KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23 Description: A critical issue was found in the delete file function of the dbus.SystemBus library in the Arbitrary File Handler component, leading to improper access controls...

CVE-2023-3099: Improper Access Control

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function deletefile in the library dbus.SystemBus of the component Arbitrary File Handler. The manipulation leads to improper access controls. It is possible to launch...

KylinSoft youker-assistant 安全漏洞

KylinSoft youker-assistant is a system management and configuration tool from China's Kylin Software KylinSoft. A security vulnerability exists in KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23, which stems from incorrect access control...