ZDI Advisories
474 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
All Hands
A critical remote code execution vulnerability (CVSS 9.8) has been discovered in All Hands' product that requires no authentication or user…
BusyBox
BusyBox is a widely-used lightweight Unix utility suite commonly embedded in Linux distributions, IoT devices, and embedded systems.
Trend Micro
Trend Micro, a major cybersecurity and antivirus software vendor, has a medium-severity vulnerability (CVSS 5.3) that allows authenticated attackers…
Quest
Quest Software, known for IT management and security solutions, has a critical remote vulnerability (ZDI-CAN-28202) with a CVSS score of 8.8 that…
EmbedThis
EmbedThis, known for embedded web server and IoT connectivity solutions, has a high-severity vulnerability (CVSS 7.5) that requires adjacent network…
EmbedThis
EmbedThis is a vendor known for embedded web server and IoT connectivity software used in various networked devices.
Trend Micro
Trend Micro is a well-established cybersecurity software vendor known for antivirus, endpoint protection, and cloud security solutions.
Quest
Quest Software has a high-severity vulnerability (CVSS 8.8) that can be exploited remotely by an authenticated attacker with no user interaction…
Lightning AI
Lightning AI is a company known for machine learning and AI development tools.
Quest
A high-severity vulnerability (CVSS 8.8) has been discovered in Quest software, a vendor known for identity and access management solutions.
Quest
Quest Software, a major provider of IT management and security solutions, has a high-severity vulnerability (CVSS 8.8) that can be exploited remotely…
Quest
Quest Software, a well-known enterprise software vendor, has a high-severity vulnerability (CVSS 8.8) that can be exploited remotely by authenticated…
Quest
Quest Software, known for IT management and backup solutions, has a high-severity vulnerability (CVSS 8.8) that can be exploited remotely by an…
Quest
Quest Software, a vendor specializing in identity and access management, backup, and disaster recovery solutions, has a high-severity vulnerability…
Quest
Quest Software has a high-severity vulnerability (CVSS 8.8) that can be exploited remotely by authenticated users without requiring user interaction,…
Quest
Quest Software, a provider of IT management and security solutions, has a high-severity vulnerability (CVSS 8.8) that can be exploited remotely by…
Quest
Quest Software, known for backup, recovery, and identity management solutions, has a high-severity vulnerability (CVSS 8.8) that can be exploited…
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a critical vulnerability (CVSS 9.9) that can be exploited remotely by authenticated users…
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local…
Super Magic
A critical vulnerability (CVSS 9.8) has been discovered in Super Magic's product that can be exploited remotely without authentication or user…
Fuji Electric
Fuji Electric, a major Japanese manufacturer of industrial automation and power systems, has a high-severity local privilege escalation vulnerability…
Fuji Electric
Fuji Electric, a major Japanese industrial automation and power systems company, has a high-severity local privilege escalation vulnerability (CVSS…
GIMP
GIMP is a widely-used open-source image editing application that has a high-severity vulnerability (CVSS 7.8) requiring local access with user…
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a critical vulnerability (CVSS 9.8) that can be exploited remotely over the network without…
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a critical vulnerability (CVSS 9.8) that can be exploited remotely over the network without…
Siemens
Siemens, a major industrial automation and control systems manufacturer, has a high-severity vulnerability (CVSS 7.8) that requires local access and…
Siemens
Siemens, a major industrial automation and control systems manufacturer, has a high-severity local vulnerability (CVSS 7.8) that requires user…
BusyBox
BusyBox is a widely-used lightweight Unix utility suite commonly embedded in IoT devices, routers, and embedded Linux systems.
Toyota
Toyota, the major automotive manufacturer, has a low-severity vulnerability (CVSS 2.4) that requires physical access to exploit and causes only minor…
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local…