ZDI Advisories

Siemens SINEC NMS Improper Authentication Privilege Escalation Vulnerability

Microsoft Windows library-ms NTLM Response Information Disclosure Vulnerability

PublicCMS getXml Server-Side Request Forgery Information Disclosure Vulnerability

Microsoft Office URI Handler NTLM Response Information Disclosure Vulnerability

Microsoft Windows afd.sys Race Condition Local Privilege Escalation Vulnerability

Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability

Microsoft Windows Secure Kernel Double Free Local Privilege Escalation Vulnerability

Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability

Microsoft Windows win32kfull Improper Locking Local Privilege Escalation Vulnerability

Microsoft Qlib _mount_nfs_uri Command Injection Remote Code Execution Vulnerability

Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

HP DeskJet 2855e JobStatusEvent Stack-based Buffer Overflow Remote Code Execution Vulnerability

Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability

Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability

Microsoft Qlib fit Deserialization of Untrusted Data Remote Code Execution Vulnerability

Microsoft Olive Deserialization of Untrusted Data Remote Code Execution Vulnerability

TrendAI Apex One Console Directory Traversal Remote Code Execution Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability

GStreamer qtdemux Stack-based Buffer Overflow Remote Code Execution Vulnerability

ATEN Unizon RpcProvider Missing Authentication Denial-of-Service Vulnerability

DriveLock SQL Injection Privilege Escalation Vulnerability

GIMP HDR File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Linux Kernel ETS Scheduler Race Condition Local Privilege Escalation Vulnerability

Malwarebytes Anti-Malware Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability

Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability

DriveLock Directory Traversal Information Disclosure Vulnerability

Adobe ColdFusion deleteVersion Directory Traversal Arbitrary File Deletion Vulnerability