ZDI Advisories

Synology

Synology is a network-attached storage (NAS) and surveillance system vendor.

GIMP

GIMP is a widely-used open-source image editing application, and this high-severity vulnerability (CVSS 7.8) can be exploited locally without…

pdfforge

PDFforge is a software company known for PDF creation and editing tools.

Ivanti

Ivanti is a well-known enterprise IT management and cybersecurity software vendor.

MindsDB

MindsDB is an open-source machine learning and AI database platform that allows developers to build AI applications with simplified data access.

QEMU

QEMU is a widely-used open-source machine emulator and virtualization platform.

Linux

A high-severity vulnerability (CVSS 7.5) has been discovered in Linux that requires local access and high-level privileges to exploit, but can result…

Ashlar-Vellum

Ashlar-Vellum is a software company known for CAD and design applications.

GIMP

GIMP is a widely-used open-source image editing software that allows users to create and modify graphics.

Ashlar-Vellum

Ashlar-Vellum is a CAD and design software company known for products like Vellum and Cobalt used in architecture and engineering.

ByteDance

ByteDance, the Chinese technology company behind TikTok and other platforms, has a high-severity local vulnerability (CVSS 7.8) that requires user…

JumpCloud

JumpCloud is a cloud-based directory and identity management platform used for managing user access across IT environments.

Trend Micro

Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security solutions.

Airbyte

Airbyte is a popular open-source data integration platform that allows users to sync data between various sources and destinations.

Trend Micro

Trend Micro is a well-known cybersecurity company specializing in antivirus, endpoint protection, and threat defense solutions.

JumpCloud

JumpCloud is a cloud-based directory and identity management platform used by organizations for user authentication and device management.

Trend Micro

This vulnerability affects Trend Micro, a major cybersecurity software vendor known for antivirus and endpoint protection products.

Airbyte

Airbyte is a popular open-source data integration platform used for ETL/ELT operations.

CrewAI

CrewAI is an open-source framework for building multi-agent AI systems.

Trend Micro

Trend Micro is a major cybersecurity software vendor known for antivirus, endpoint protection, and threat defense solutions.

Trend Micro

Trend Micro, a major cybersecurity and antivirus software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that…

Trend Micro

Trend Micro is a major cybersecurity company known for antivirus, endpoint protection, and cloud security solutions.

Trend Micro

Trend Micro, a major cybersecurity software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires low-level…

Trend Micro

Trend Micro, a major cybersecurity software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local…

QEMU

QEMU is a widely-used open-source virtualization platform that emulates hardware to run virtual machines.

Fuji Electric

Fuji Electric, a major Japanese industrial automation and power systems manufacturer, has a medium-severity vulnerability (CVSS 5.5) in one of their…

Fuji Electric

Fuji Electric, a major Japanese manufacturer of industrial automation and power systems equipment, has a high-severity local privilege escalation…

Trend Micro

Trend Micro is a well-known cybersecurity software vendor that produces antivirus, endpoint protection, and threat defense solutions.

Trend Micro

Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security products.

Allegra

Allegra's product contains a medium-severity vulnerability (CVSS 4.6) that can be exploited remotely by an authenticated user through a clickable…