CVE-2019-15084

Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM...

CVE-2010-4758

installer.pl in Open Ticket Request System OTRS before 3.0.3 has an Inbound Mail Password field that uses the text type, instead of the password type, for its INPUT element, which makes it easier for physically proximate attackers to obtain the password by reading the workstation screen...

CVE-2019-17388

Weak file permissions applied to the Aviatrix VPN Client through 2.2.10 installation directory on Windows and Linux allow a local attacker to execute arbitrary code by gaining elevated privileges through file modifications...

CVE-2019-12574

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...

CVE-2025-2759

GStreamer CVE-2025-2759 is a local privilege escalation caused by incorrect permissions in the installer folders, enabling a low-privilege attacker to run code with the target user’s rights. Details across connected sources (ZDI advisory ZDI-25-268 and related OSV/NVD entries) confirm the flaw an...

CVE-2024-40458

CVE-2024-40458 affects Ocuco Innovation Tracking.exe 2.10.24.51. The issue allows a local attacker to escalate privileges through modification of TCP packets. CVSSv3.1 base score 7.8 (HIGH) with LOCAL attack vector, LOW attack complexity, no user interaction, and impact to Confidentiality, Integr...

CVE-2024-40458

An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets...

CVE-2024-40459

An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the application manager function...

CVE-2024-40461

An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component...

PT-2025-22551 · Ocuco Innovation · Appmanager.Exe

Name of the Vulnerable Software and Affected Versions: Ocuco Innovation APPMANAGER.EXE version 2.10.24.51 Description: The issue allows a local attacker to escalate privileges via the application manager function. Recommendations: For Ocuco Innovation APPMANAGER.EXE version 2.10.24.51, consider...

PT-2025-22483 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.4.0p1 Checkmk versions prior to 2.3.0p32 Checkmk versions prior to 2.2.0p42 Checkmk versions prior to or equal to 2.1.0p49 Description: The issue arises from incorrect permissions of packages downloaded by Checkmk'...

CVE-2002-2122

Pointsec before 1.2 for PalmOS stores a user's PIN number in memory in plaintext, which allows a local attacker who steals an unlocked Palm to retrieve the PIN by dumping memory...

CVE-2025-20112

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attack...

CVE-2024-56428

The local iLabClient database in itech iLabClient 3.7.1 allows local attackers to read cleartext credentials from the CONFIGS table for their servers configured in the client...

CVE-2025-20112 Cisco Unified Communications Products Privilege Escalation Vulnerability

A vulnerability in multiple Cisco Unified Communications and Contact Center Solutions products could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to excessive permissions that have been assigned to system commands. An attack...

itech iLabClient 安全漏洞

itech iLabClient is a powerful sender-side lab data receiving software from itech. A security vulnerability exists in itech iLabClient version 3.7.1 that originates from a local attacker being able to read plaintext credentials in the CONFIGS table...

Linux Kernel OpenvSwitch Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of Linux Kernel. An attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handlin...

PT-2025-22376 · Cisco +1 · Cisco Unified Communications/Contact Center Solutions +1

Name of the Vulnerable Software and Affected Versions: Cisco Unified Communications and Contact Center Solutions products affected versions not specified Description: A vulnerability in the system could allow an authenticated, local attacker to elevate privileges to root on an affected device. Th...

CVE-2024-56428

The CVE-2024-56428 entry concerns itech iLabClient 3.7.1. A local attacker can read cleartext credentials stored in the local iLabClient database (CONFIGS table), exposing server configuration secrets and compromising confidentiality. The underlying issue is local access to the client database ra...

Zyxel USG FLEX H Series Firewall 1.20 < 1.32 Privilege Escalation

Firmware version of the Zyxel USG is less than uOS 1.32. This means the Zyxel device is vulnerable to mualtiple privilege escalation vulnerability. The incorrect permission assignment vulnerability in the PostgreSQL commands of certain USG FLEX H series uOS firmware versions could allow an...