PT-2026-98838

Name of the Vulnerable Software and Affected Versions Seclore FileSecure Desktop Client versions prior to 3.25.1.0 Description An improper access control issue exists in the kernel-mode driver component. This allows an authenticated local user to elevate their privileges to NT AUTHORITYSYSTEM,...

PT-2026-95001

Name of the Vulnerable Software and Affected Versions SolarWinds Access Rights Manager versions prior to 2026.2.1.7 Description An unauthenticated remote code execution issue exists due to a hardcoded shared HMAC secret included in the installer that is identical across all deployments. The gRPC...

PT-2025-30989

Name of the Vulnerable Software and Affected Versions: Lakeside SysTrack versions affected versions not specified Description: LsiAgent.exe, a component of SysTrack, attempts to load DLL files that are not part of the default installation. If a user-writable directory is included in the SYSTEM PA...

PT-2025-15869

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect app versions prior to 6.2.7-h3 Palo Alto Networks GlobalProtect app versions prior to 6.2.8 Palo Alto Networks GlobalProtect app version 6.3.0 Description: A vulnerability with a privilege management mechanism...

PT-2025-15442

Name of the Vulnerable Software and Affected Versions: IBM Personal Communications versions 14 through 15 Description: The issue allows any interactively logged-in users on the target computer to run commands with full privileges in the context of NT AUTHORITYSYSTEM. This enables a low-privileged...

PT-2025-11117

Name of the Vulnerable Software and Affected Versions: GlobalProtect App on Windows devices affected versions not specified Description: The issue is related to a reliance on untrusted input for a security decision in the GlobalProtect app, potentially allowing a locally authenticated...

PT-2024-11526

Name of the Vulnerable Software and Affected Versions Y Soft SAFEQ version 6 Build 53 Description A Local Privilege Escalation issue was discovered. The SafeQ JMX service running on port 9696 is vulnerable to JMX MLet attacks. Because the service did not enforce authentication and was running und...

PT-2024-28012

Name of the Vulnerable Software and Affected Versions HIGH-LEIT versions 04.25.00.00 through 04.25.01.01 HIGH-LEIT version 05.08.01.03 Description The issue concerns an insecure file and folder permissions vulnerability in the prunsrv.exe file. This vulnerability can be exploited by a regular use...

PT-2023-7356

Name of the Vulnerable Software and Affected Versions Nessus Network Monitor affected versions not specified Description The issue is related to errors in privilege management. Under certain conditions, Nessus Network Monitor could allow a low privileged user to escalate privileges to NT...

PT-2023-5492

Name of the Vulnerable Software and Affected Versions HPE Aruba Networking Virtual Intranet Access VIA client affected versions not specified Description A vulnerability in the HPE Aruba Networking Virtual Intranet Access VIA client could allow local users to elevate privileges. Successful...

PT-2023-21540

Name of the Vulnerable Software and Affected Versions PowerPath for Windows versions 7.0 through 7.2 Description The issue allows a regular user to potentially escalate privileges and execute arbitrary code in the context of NT AUTHORITYSYSTEM due to DLL Hijacking Vulnerabilities. Recommendations...

PT-2023-19634

Name of the Vulnerable Software and Affected Versions Citrix Virtual Apps and Desktops Windows VDA affected versions not specified Description A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITYSYSTEM on a Citrix...

PT-2022-6710

Name of the Vulnerable Software and Affected Versions Netwrix Auditor affected versions not specified Description The issue is related to insufficient deserialization mechanisms in the User Activity Video Recording component of Netwrix Auditor. This can be exploited by a remote attacker to execut...

PT-2022-2395

Name of the Vulnerable Software and Affected Versions NoMachine for Windows versions prior to 6.15.1 and 7.5.2 Description The issue is related to the incorrect handling of the DLL search path in the NoMachine remote desktop access system, allowing for local privilege escalation due to the lack o...

PT-2022-10674

Name of the Vulnerable Software and Affected Versions ESET products for Windows affected versions not specified Description The issue allows an untrusted process to impersonate the client of a pipe, which can be leveraged by an attacker to escalate privileges in the context of NT AUTHORITYSYSTEM...

PT-2021-11046

Name of the Vulnerable Software and Affected Versions: Netskope Client versions through 77 Description: The issue allows low-privileged users to elevate their privileges to NT AUTHORITYSYSTEM. Recommendations: For versions through 77, update to a version that contains a fix for this issue to...

PT-2021-4937

Name of the Vulnerable Software and Affected Versions MB connect line mbDIALUP versions = 3.9R0.0 Description The issue is related to insufficient access control in the mbConnect24serv component, allowing a low-privileged local attacker to send a command to the service running with NT...

PT-2021-21118

Name of the Vulnerable Software and Affected Versions: Echo ShareCare version 8.15.5 Description: An issue was discovered in the file-upload feature of Echo ShareCare, specifically in the Access/DownloadFeed Mnt/FileUpload Upd.cfm file, which is susceptible to an unrestricted upload vulnerability...

PT-2021-20951

Name of the Vulnerable Software and Affected Versions: Securepoint SSL VPN Client versions prior to 2.0.32 Description: The issue concerns unsafe configuration handling that enables local privilege escalation to NT AUTHORITYSYSTEM. A non-privileged local user can modify the OpenVPN configuration...

PT-2021-5594

Name of the Vulnerable Software and Affected Versions Bitdefender Endpoint Security Tools versions prior to 7.2.1.65 Bitdefender Total Security versions prior to 25.0.26 Description The issue allows a local attacker to elevate to 'NT AUTHORITYSystem'. Impersonation enables the server thread to...