ZDI Advisories
248 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
DriveLock Directory Traversal Information Disclosure Vulnerability
QNAP TS-453E QVRPro excpostgres Exposed Dangerous Method Remote Code Execution Vulnerability
Linux Kernel ETS Scheduler Race Condition Local Privilege Escalation Vulnerability
ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability
Adobe ColdFusion fetchCFSettingFile Directory Traversal Information Disclosure Vulnerability
Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability
Adobe ColdFusion subscribeToEndpoints Authentication Bypass Vulnerability
NI LabVIEW LVLIB File Parsing Memory Corruption Remote Code Execution Vulnerability
Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability
Microsoft Olive Deserialization of Untrusted Data Remote Code Execution Vulnerability
Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability
Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability
Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability
Malwarebytes Anti-Malware Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability
HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability
NI LabVIEW LVCLASS File Parsing Memory Corruption Remote Code Execution Vulnerability
Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability
Microsoft Windows afd.sys Race Condition Local Privilege Escalation Vulnerability
Microsoft Qlib fit Deserialization of Untrusted Data Remote Code Execution Vulnerability
Microsoft Qlib _mount_nfs_uri Command Injection Remote Code Execution Vulnerability
Avast Premium Security Gen Self Protection Driver Exposed Dangerous Function Local Privilege Escalation Vulnerability
Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability
TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability
TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability
Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability
Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability
Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability
DriveLock Directory Traversal Information Disclosure Vulnerability