ZDI Advisories
331 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
Linux
This vulnerability affects Linux, the widely-used open-source operating system kernel.
LiteLLM
LiteLLM is an open-source library that provides a unified interface for large language models and AI services.
Labcenter Electronics
Labcenter Electronics, known for circuit simulation and PCB design software, has a high-severity local vulnerability (CVSS 7.8) that requires user…
Labcenter Electronics
Labcenter Electronics is a software company known for circuit simulation and electronic design tools.
Labcenter Electronics
Labcenter Electronics, known for circuit simulation and PCB design software, has a high-severity local vulnerability (CVSS 7.8) that requires no…
Labcenter Electronics
Labcenter Electronics, a well-known developer of circuit simulation and PCB design software, has a high-severity vulnerability (CVSS 7.8) that can be…
Rockwell Automation
Rockwell Automation, a major industrial control systems and manufacturing software vendor, has a high-severity local vulnerability that requires user…
Lorex
Lorex is a well-known manufacturer of surveillance and security camera systems.
Microsoft
Microsoft has a critical remote vulnerability (CVSS 8.8) that allows unauthenticated attackers to compromise systems over the network with only user…
Microsoft
Microsoft has a high-severity vulnerability (CVSS 8.8) that requires adjacent network access but no authentication or user interaction, allowing…
Ollama
Ollama is an open-source platform for running large language models locally.
Docker
Docker, the widely-used containerization platform, has a high-severity vulnerability (CVSS 8.2) that requires local access and elevated privileges to…
Glarysoft
Glarysoft is a well-known developer of system optimization and cleaning utilities for Windows.
Trend Micro
Trend Micro is a well-known cybersecurity company that produces antivirus, endpoint protection, and threat management software.
LiteLLM
LiteLLM is a popular open-source library that provides a unified interface for accessing various large language models and AI APIs.
NVIDIA
NVIDIA, a major graphics processor and AI computing company, has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely over the…
NetBSD
NetBSD is an open-source operating system used in servers, embedded systems, and research environments.
Linux
Linux is the widely-used open-source operating system kernel found across servers, desktops, and embedded systems worldwide.
Lorex
Lorex is a well-known manufacturer of surveillance and security camera systems.
Docker
Docker is a widely-used containerization platform that enables developers to package and deploy applications in isolated environments.
Docker
Docker is a widely-used containerization platform that allows developers to package and run applications in isolated environments.
Docker
Docker, the widely-used containerization platform, has a high-severity vulnerability (CVSS 7.5) that requires local access and high-level privileges…
OceanBase
OceanBase, a distributed relational database platform, has a critical vulnerability (CVSS 9.8) that can be exploited remotely without authentication…
Bytebase
A critical vulnerability (CVSS 9.8) has been discovered in Bytebase, a database management and version control platform.
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local…
Toyota
Toyota, the major automotive manufacturer, has a low-severity vulnerability (CVSS 2.4) that requires physical access to exploit and causes only minor…
BusyBox
BusyBox is a widely-used lightweight Unix utility suite commonly embedded in IoT devices, routers, and embedded Linux systems.
Siemens
Siemens, a major industrial automation and control systems manufacturer, has a high-severity local vulnerability (CVSS 7.8) that requires user…
Siemens
Siemens, a major industrial automation and control systems manufacturer, has a high-severity vulnerability (CVSS 7.8) that requires local access and…
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a critical vulnerability (CVSS 9.8) that can be exploited remotely over the network without…