Approved changes feed: RSS · Atom

cpe:2.3:a:kylinsoft:youker-assistant:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKylinsoft (0477b78a-5e80-5cc0-a8d0-ba4ced9bde8b)
ProductYouker Assistant (374af8a5-393d-59c9-89c2-fe318d142535)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3099 vulnerable 2026-06-08 06:09:38.512747 KylinSoft youker-assistant Arbitrary File dbus.SystemBus delete_file access control
MEDIUM (4.4)
A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function delete_file in the library dbus.SystemBus of the component Arbitrary File Handler. The manipulation leads to improper access controls. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.2-0kylin6k70-23 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-230689 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-06-05T07:00:04.362Z
Updated: 2024-08-02T06:48:07.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3098 vulnerable 2026-06-08 06:09:38.510992 KylinSoft youker-assistant restore_all_sound_file path traversal
MEDIUM (4.4)
A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restore_all_sound_file. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 3.0.2-0kylin6k70-23 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-230688. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-06-05T06:31:03.614Z
Updated: 2024-08-02T06:48:07.044Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-2091 vulnerable 2026-06-08 06:02:41.403362 KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection
HIGH (7.8)
A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjust_cpufreq_scaling_governer. The manipulation leads to os command injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 3.1.4.13 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-226099.
Published: 2023-04-15T08:40:43.814Z
Updated: 2024-11-22T16:06:11.276Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.