ZDI Advisories
1797 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
ATEN Unizon ImportDeviceList Directory Traversal Remote Code Execution Vulnerability
ATEN Unizon restoreDB Directory Traversal Remote Code Execution Vulnerability
ATEN Unizon writeFileToHttpServletResponse Directory Traversal Information Disclosure Vulnerability
ATEN Unizon doCryptoHugeFileToFile Improper Verification of Cryptographic Signature Remote Code Execution Vulnerability
Oracle PeopleSoft ExecuteProcessActivityCommand External Control of File Path Remote Code Execution Vulnerability
Oracle PeopleSoft HubMBeanPersistance Deserialization of Untrusted Data Remote Code Execution Vulnerability
Oracle PeopleSoft HttpListeningConnector Server-Side Request Forgery Vulnerability
Unraid Web Server ToggleState Command Injection Remote Code Execution Vulnerability
Unraid Web Server FileUpload Command Injection Remote Code Execution Vulnerability
X.Org Server Font Alias Stack-based Buffer Overflow Privilege Escalation Vulnerability
X.Org Server SyncChangeCounter Use-After-Free Privilege Escalation Vulnerability
X.Org Server FreeCounter Use-After-Free Privilege Escalation Vulnerability
ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability
X.Org Server SetMap Request Stack-based Buffer Overflow Privilege Escalation Vulnerability
ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability
X.Org Server Xkb Key Types Stack-based Buffer Overflow Privilege Escalation Vulnerability
X.Org Server miSyncDestroyFence Use-After-Free Privilege Escalation Vulnerability
MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability
Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution Vulnerability
Fuji Electric Tellus pcid64 Driver File APIs Exposed Dangerous Method Arbitrary File Deletion Vulnerability
X.Org Server ChangeDrawableAttributes Out-Of-Bounds Read Information Disclosure Vulnerability
FlowiseAI Flowise CSV Agent customReadCSV Code Injection Remote Code Execution Vulnerability
Microsoft
Oracle
verl
verl
Apple
Microsoft
Foxit
Soda PDF