KylinSoft vulnerabilities
We track 8 vulnerabilities in KylinSoft products across 5 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on December 25, 2023.
Latest KylinSoft vulnerabilities
- 7.8 High severity
kylin-system-updater: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical has been found in KylinSoft kylin-system-updater up to 2.0.5.16-0k2.33. Affected is an unknown function of the file /usr/share/kylin-system-updater/SystemUpdater/UpgradeStrategiesDbus.py of the component com.kylin.systemu
- 7.8 High severity
hedron-domain-hook: Improper Access Control
A vulnerability was found in KylinSoft hedron-domain-hook up to 3.8.0.12-0k0.5. It has been declared as critical. This vulnerability affects the function init_kcm of the component DBus Handler. The manipulation leads to improper access controls. Attacking loca
- 7.1 High severity
youker-assistant: Improper Access Control
A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function delete_file in the library dbus.SystemBus of the component Arbitrary File Handler. The manipulation leads to improper acce
- 7.8 High severity
youker-assistant: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability classified as critical has been found in KylinSoft youker-assistant on KylinOS. Affected is the function restore_all_sound_file. The manipulation leads to path traversal: '../filedir'. Attacking locally is a requirement. The exploit has been di
- 7.8 High severity
kylin-software-properties: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been rated as critical. This issue affects the function setMainSource. The manipulation leads to os command injection. Local access is required to approach this attack. The exp
- 7.8 High severity
kylin-software-properties: Improper Access Control
A vulnerability was found in KylinSoft kylin-software-properties on KylinOS. It has been declared as critical. This vulnerability affects the function changedSource. The manipulation leads to improper access controls. An attack has to be approached locally. Th
- 7.8 High severity
youker-assistant: Improper Neutralization of Special Elements used in an OS Command
A vulnerability classified as critical was found in KylinSoft youker-assistant on KylinOS. Affected by this vulnerability is the function adjust_cpufreq_scaling_governer. The manipulation leads to os command injection. It is possible to launch the attack on th
- 7.8 High severity
kylin-activation: Incorrect Authorization
A vulnerability was found in KylinSoft kylin-activation on KylinOS and classified as critical. Affected by this issue is some unknown functionality of the component File Import. The manipulation leads to improper authorization. The attack needs to be approache