A vulnerability is an error on the code in our application or on the configuration that it produces that an attacker can use to change the behaviour of the application, such as injecting code or accessing private data.
A vulnerability also can be a weakness in the security of a system, which can be exploited to gain access to it. These can be exploited in two ways: remote and local. A remote attack is one that is made from a different machine than the one being attacked, while a local attack is one performed, as its name implies, locally on the machine to be attacked. The latter is based on a series of techniques to gain access and elevate privileges on that machine.
