CVE-2023-3096

CVE-2023-3096 affects the KylinSoft kylin-software-properties component on KylinOS. The issue lies in the function changedSource , which enables improper access controls and can be exploited locally. The vulnerability has been exploited publicly and a fix is available in version 0.0.1-130 ; upgra...

CVE-2023-3096 KylinSoft kylin-software-properties changedSource access control

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vulnerability affects the function changedSource. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the...

CVE-2023-3096 KylinSoft kylin-software-properties changedSource access control

A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vulnerability affects the function changedSource. The manipulation leads to improper access controls. An attack has to be approached locally. The exploit has been disclosed to the...

KylinSoft youker-assistant 路径遍历漏洞

KylinSoft youker-assistant is a system management and configuration tool from KylinSoft China. A security vulnerability exists in KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23. An attacker could exploit the vulnerability to access files and directories stored outside of the web...

PT-2023-23100 · Kylinsoft · Youker-Assistant

Name of the Vulnerable Software and Affected Versions: KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23 Description: A critical issue was found in the delete file function of the dbus.SystemBus library in the Arbitrary File Handler component, leading to improper access controls...

KylinSoft kylin-software-properties 安全漏洞

KylinSoft kylin-software-properties is an application from KylinSoft China. A security vulnerability exists in KylinSoft kylin-software-properties prior to version 0.0.1-130, which stems from incorrect access control...

KylinSoft youker-assistant 安全漏洞

KylinSoft youker-assistant is a system management and configuration tool from China's Kylin Software KylinSoft. A security vulnerability exists in KylinSoft youker-assistant versions prior to 3.0.2-0kylin6k70-23, which stems from incorrect access control...

KylinSoft kylin-software-properties 操作系统命令注入漏洞

KylinSoft kylin-software-properties is an application from KylinSoft China. An OS command injection vulnerability exists in KylinSoft kylin-software-properties versions prior to 0.0.1-130. An attacker could exploit this vulnerability to perform os command injection attacks...

CVE-2023-2091

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjustcpufreqscalinggoverner. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been...

Command injection

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjustcpufreqscalinggoverner. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been...

CVE-2023-2091

CVE-2023-2091 affects KylinSoft youker-assistant on KylinOS. The issue resides in the function adjust_cpufreq_scaling_governer , whose manipulation enables OS command injection on the local host. The vulnerability has been publicly disclosed and an exploit exists, with the recommended fix being t...

CVE-2023-2091 KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjustcpufreqscalinggoverner. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been...

CVE-2023-2091 KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection

A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjustcpufreqscalinggoverner. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been...

PT-2023-17699 · Kylinsoft · Youker-Assistant

Name of the Vulnerable Software and Affected Versions: KylinSoft youker-assistant versions prior to 3.1.4.13 Description: A critical issue was found in the adjust cpufreq scaling governer function, leading to os command injection. The attack can be launched on the local host. Recommendations: For...

KylinSoft youker-assistant 操作系统命令注入漏洞

KylinSoft youker-assistant is a system management and configuration tool from China-based KylinSoft. An operating system command injection vulnerability exists in KylinSoft youker-assistant versions prior to 3.1.4.13, which stems from a security issue in the function adjustcpufreqscalinggoverner,...

CVE-2023-1164

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

CVE-2023-1164

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

Authorization

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

CVE-2023-1164 KylinSoft kylin-activation File Import improper authorization

A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approached locally. The exploit has been...

CVE-2023-1164

CVE-2023-1164 affects KylinSoft kylin-activation on KylinOS, specifically the File Import functionality. The root cause is improper authorization within File Import, enabling a local attacker to exploit the issue. Several sources confirm the vulnerability, with public disclosures indicating local...