CVE-2024-23593

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to modify the boot manager and escalate privileges...

CVE-2024-23594

A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to execute arbitrary code...

CVE-2024-23594

A buffer overflow vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to execute arbitrary code...

CVE-2024-23594

Technical details about CVE-2024-23594 (affected product/component/impact) are not provided in the connected documents. Monitor for updates from Lenovo or security advisories.

CVE-2024-23593

Technical details about CVE-2024-23593 (Lenovo bootloader privilege escalation) are not provided in the connected documents; monitoring for updates is advised.

CVE-2024-23593

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to modify the boot manager and escalate privileges...

CVE-2024-23593

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to modify the boot manager and escalate privileges...

PT-2024-27758 · Technicolor · Technicolor Cga2121

Name of the Vulnerable Software and Affected Versions: Technicolor CGA2121 version 1.01 Description: A vulnerability of Information Exposure has been found, allowing a local attacker to obtain sensitive information stored on the device, such as wifi network's SSID and their respective passwords...

PT-2024-10421 · Kde +4 · Kde Plasma Workspace +4

Name of the Vulnerable Software and Affected Versions: KDE Plasma Workspace versions prior to 5.27.11.1 KDE Plasma Workspace 6.x versions prior to 6.0.5.1 Description: The issue allows connections via ICE based purely on the host, i.e., all local connections are accepted. This enables another use...

Juniper Networks Junos OS 安全漏洞

Juniper Networks Junos OS is a Juniper Networks USA network operating system dedicated to the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS versions prior to 21.2R3-S7, 21.4...

CVE-2024-27247

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-27247

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...

CVE-2024-27247

CVE-2024-27247 describes an issue in the Zoom Desktop Client for macOS installer prior to version 5.17.10 where improper privilege management could allow a privileged local user to escalate privileges. Affected software: Zoom Desktop Client for macOS (pre-5.17.10). Root cause: installer privilege...

CVE-2024-24694 Zoom Desktop Client for Windows - Improper Privilege Management

Improper privilege management in the installer for Zoom Desktop Client for Windows before version 5.17.10 may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-24694

Affected software: Zoom Desktop Client for Windows (prior to version 5.17.10). Vulnerability: Improper privilege management in the installer could allow an authenticated user to escalate privileges via local access. Root cause / vector: Local access with low privileges; flaw is in the Windows ins...

CVE-2023-48784

A use of externally-controlled format string vulnerability CWE-134 in FortiOS version 7.4.1 and below, version 7.2.7 and below, 7.0 all versions, 6.4 all versions command line interface may allow a local privileged attacker with super-admin profile and CLI access to execute arbitrary code or...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.17.10 that stems from improper privilege management and could allow authenticated users to escalate privileges via local access...

PT-2024-2999 · Microsoft · Windows 8 +2

Name of the Vulnerable Software and Affected Versions: Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 Description: A vulnerability was reported in a system recovery bootloader that could allow a privileged attacker with local access to modify the boot manager and escalate...

PT-2024-23126

Name of the Vulnerable Software and Affected Versions DIRAC versions prior to 8.0.41 Description DIRAC is a software framework for distributed computing. During the proxy generation process, such as when using dirac-proxy-init, unauthorized users on the same machine can gain read access to the...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.17.10 that stems from improper privilege management and could allow privileged users to escalate privileges via local access...