ZDI Advisories
1128 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
Microsoft
Microsoft, a major software and cloud services provider, has a high-severity vulnerability (CVSS 7.6) that can be exploited remotely without…
GNU
GNU is the open-source software foundation behind widely-used tools like GCC compiler and core Linux utilities, making this vulnerability potentially…
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely over the network without authentication, though it requires…
AzeoTech
AzeoTech is a software company known for industrial automation and SCADA control systems.
Microsoft
Microsoft has a high-severity vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, with potential to…
AzeoTech
AzeoTech is a software company known for industrial automation and SCADA/HMI (human-machine interface) platforms.
Microsoft
Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to…
Mozilla
Mozilla, the company behind the Firefox browser and related internet services, has a critical vulnerability (CVSS 8.8) that can be exploited remotely…
Trend Micro
Trend Micro is a well-known cybersecurity software vendor specializing in antivirus, endpoint protection, and threat defense solutions.
Trend Micro
Trend Micro is a major cybersecurity vendor that provides antivirus, endpoint protection, and cloud security solutions.
Microsoft
Microsoft has disclosed a low-severity local information disclosure vulnerability (CVSS 3.3) that requires user interaction to exploit but no…
Flowise
Flowise is a popular open-source low-code platform for building AI applications and chatbots.
Flowise
Flowise is an open-source platform for building AI applications and workflows.
Linux
Linux kernel vulnerability CVE classified as HIGH severity (CVSS 7.5) requires local access and high-level privileges to exploit, but can result in…
AOMEI
AOMEI is a software vendor known for backup, cloning, and disk management utilities commonly used in enterprise and consumer environments.
AOMEI
AOMEI, known for backup and disk utility software, has a high-severity vulnerability (CVSS 7.5) that allows unauthenticated remote attackers to…
Parallels
Parallels, known for virtualization and remote access software, has a high-severity vulnerability (CVSS 7.8) that requires local access and valid…
Parallels
Parallels, a well-known provider of virtualization and desktop management software, has a high-severity vulnerability (CVSS 7.8) that requires local…
Parallels
Parallels, known for virtualization and desktop software solutions, has a high-severity vulnerability (CVSS 7.8) that requires local access and…
Docker
Docker, a leading containerization platform, has a high-severity vulnerability (CVSS 8.8) that requires local access and low-level user privileges to…
Microsoft
Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to…
OpenAI
OpenAI, the artificial intelligence company behind ChatGPT and related AI services, has a high-severity local vulnerability (CVSS 8.6) that requires…
Flowise
Flowise is an open-source low-code platform for building AI applications, and this vulnerability has a high severity rating of 8.8.
Adobe
Adobe, a major software vendor known for creative and productivity applications, has a high-severity local vulnerability (CVSS 7.8) that requires…
Meta
Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but…
Progress Software
Progress Software is a well-known vendor of enterprise integration, workflow automation, and database solutions widely used across organizations…
Progress Software
Progress Software is a well-known vendor of enterprise application development and management solutions.
Hong Kong University Data Intelligence Lab
A critical vulnerability (CVSS 9.3) has been discovered in the Hong Kong University Data Intelligence Lab's products or services, which focuses on…
n8n
n8n is a workflow automation platform that allows users to connect and automate tasks across multiple applications.
Hong Kong University Data Intelligence Lab
Hong Kong University Data Intelligence Lab has a high-severity vulnerability (CVSS 7.5) that allows remote attackers to gain unauthorized access to…