CVE-2024-23593

MEDIUM Year: 2024
CVSS v3 Score
6.7
Medium
Weakness Type
CWE-1284
View all →

Vulnerability Description

A vulnerability was reported in a system recovery bootloader that was part of the Lenovo preloaded Windows 7 and 8 operating systems from 2012 to 2014 that could allow a privileged attacker with local access to modify the boot manager and escalate privileges.

Related Vulnerabilities

CVE-2024-3185

MEDIUM
CVSS:6.8(Medium)

A key used in logging.json does not follow the least privilege principle by default and is exposed to local users in the Rapid7 Platform. This allows an attacker with local access to a machine with th...

CWE-12842024

CVE-2022-22166

MEDIUM
CVSS:6.5(Medium)

An Improper Validation of Specified Quantity in Input vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause an rdp crash...

CWE-12842022

CVE-2022-2592

MEDIUM
CVSS:6.5(Medium)

A lack of length validation in Snippet descriptions in GitLab CE/EE affecting all versions prior to 15.1.6, 15.2 prior to 15.2.4 and 15.3 prior to 15.3.2 allows an authenticated attacker to create a m...

CWE-12842022

CVE-2022-3411

MEDIUM
CVSS:6.5(Medium)

A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an authenticated attacker to create a large Issue descript...

CWE-12842022

CVE-2022-4111

MEDIUM
CVSS:6.5(Medium)

Unrestricted file size limit can lead to DoS in tooljet/tooljet <1.27 by allowing a logged in attacker to upload profile pictures over 2MB.

CWE-12842022

CVE-2023-36839

MEDIUM
CVSS:6.5(Medium)

An Improper Validation of Specified Quantity in Input vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent...

CWE-12842023