ZDI Advisories

Bytebase

A critical vulnerability (CVSS 9.8) has been discovered in Bytebase, a database management and version control platform.

OceanBase

OceanBase, a distributed relational database platform, has a critical vulnerability (CVSS 9.8) that can be exploited remotely without authentication…

Docker

Docker, the widely-used containerization platform, has a high-severity vulnerability (CVSS 7.5) that requires local access and high-level privileges…

Docker

Docker is a widely-used containerization platform that allows developers to package and run applications in isolated environments.

Docker

Docker is a widely-used containerization platform that enables developers to package and deploy applications in isolated environments.

Lorex

Lorex is a well-known manufacturer of surveillance and security camera systems.

Linux

Linux is the widely-used open-source operating system kernel found across servers, desktops, and embedded systems worldwide.

NetBSD

NetBSD is an open-source operating system used in servers, embedded systems, and research environments.

NVIDIA

NVIDIA, a major graphics processor and AI computing company, has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely over the…

Trend Micro

Trend Micro is a well-known cybersecurity company that produces antivirus, endpoint protection, and threat management software.

LiteLLM

LiteLLM is a popular open-source library that provides a unified interface for accessing various large language models and AI APIs.

Glarysoft

Glarysoft is a well-known developer of system optimization and cleaning utilities for Windows.

Docker

Docker, the widely-used containerization platform, has a high-severity vulnerability (CVSS 8.2) that requires local access and elevated privileges to…

Ollama

Ollama is an open-source platform for running large language models locally.

Microsoft

Microsoft has a high-severity vulnerability (CVSS 8.8) that requires adjacent network access but no authentication or user interaction, allowing…

Microsoft

Microsoft has a critical remote vulnerability (CVSS 8.8) that allows unauthenticated attackers to compromise systems over the network with only user…

Lorex

Lorex is a well-known manufacturer of surveillance and security camera systems.

Rockwell Automation

Rockwell Automation, a major industrial control systems and manufacturing software vendor, has a high-severity local vulnerability that requires user…

Labcenter Electronics

Labcenter Electronics is a software company known for circuit simulation and electronic design tools.

Labcenter Electronics

Labcenter Electronics, known for circuit simulation and PCB design software, has a high-severity local vulnerability (CVSS 7.8) that requires no…

Labcenter Electronics

Labcenter Electronics, known for circuit simulation and PCB design software, has a high-severity local vulnerability (CVSS 7.8) that requires user…

Labcenter Electronics

Labcenter Electronics, a well-known developer of circuit simulation and PCB design software, has a high-severity vulnerability (CVSS 7.8) that can be…

LiteLLM

LiteLLM is an open-source library that provides a unified interface for large language models and AI services.

Linux

This vulnerability affects Linux, the widely-used open-source operating system kernel.

AnyDesk

AnyDesk is a popular remote desktop software platform used for IT support and remote access.

AnyDesk

AnyDesk, a remote desktop software company, has a medium-severity denial of service vulnerability that requires local access and low-level user…

Linux

Linux is the open-source operating system kernel used across servers, desktops, and embedded systems worldwide.

Ubiquiti Networks

Ubiquiti Networks, a major provider of networking and wireless infrastructure equipment, has a high-severity vulnerability (CVSS 8.8) that can be…

Ubiquiti Networks

Ubiquiti Networks, a major provider of networking and wireless infrastructure equipment, has a high-severity vulnerability (CVSS 8.0) that requires…

iXsystems

iXsystems, known for their TrueNAS storage and FreeBSD-based solutions, has a high-severity vulnerability (CVSS 8.0) that requires local network…