ZDI Advisories

Databricks

Databricks, a major cloud data analytics and AI platform company, has a high-severity local vulnerability (CVSS 7.8) that requires no authentication…

Cisco

Cisco is a major networking and cybersecurity company whose products are widely deployed in enterprise environments.

NI

National Instruments (NI) has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no authentication, allowing an…

Krita

Krita is a popular open-source digital painting and illustration software.

DriveLock

DriveLock is a German endpoint security and data protection software vendor.

Delta Electronics

Delta Electronics, a major manufacturer of power supplies and industrial automation components, has a high-severity vulnerability (CVSS 7.8) that…

DriveLock

DriveLock is a German endpoint security and data protection vendor.

DriveLock

DriveLock is a German endpoint security and data protection company known for device control and encryption solutions.

DriveLock

DriveLock is a German endpoint security and data protection vendor.

NoMachine

NoMachine, a remote desktop and access software vendor, has a high-severity vulnerability (CVSS 7.1) that requires local access and low-level user…

Krita

Krita is a free, open-source digital painting and illustration software commonly used by artists and designers.

Krita

Krita is a popular open-source digital painting and illustration software application.

Krita

Krita is a popular open-source digital painting and illustration software application.

DriveLock

DriveLock is a German endpoint security and data protection vendor.

NoMachine

NoMachine, a remote desktop and access software provider, has a high-severity vulnerability (CVSS 7.8) that requires local access and low-level user…

Krita

Krita is a widely-used open-source digital painting and illustration software.

Ashlar-Vellum

Ashlar-Vellum is a software company known for CAD and design tools.

npm

npm is the largest package manager for JavaScript and Node.js, used by millions of developers worldwide.

DeepSpeed

DeepSpeed is a deep learning optimization library developed by Microsoft for training large-scale AI models.

Hugging Face

Hugging Face is a well-known AI/ML platform that hosts machine learning models and provides collaborative tools for developers.

npm

npm is the JavaScript package manager and repository used by millions of developers worldwide.

Microsoft

Microsoft has a medium-severity information disclosure vulnerability (CVSS 4.3) that can be exploited remotely by an unauthenticated attacker through…

verl

This advisory concerns a high-severity vulnerability (CVSS 7.8) in Verl, a lesser-known vendor product.

MLflow

MLflow is an open-source machine learning platform used for experiment tracking and model management.

Intel

Intel, a major semiconductor and processor manufacturer, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…

Hugging Face

Hugging Face is a well-known AI/machine learning platform that provides pretrained models and collaborative tools for developers.

NVIDIA

NVIDIA is a major technology company known for graphics processors, AI chips, and data center hardware.

verl

A high-severity vulnerability (CVSS 7.8) has been discovered in Verl, affecting the confidentiality, integrity, and availability of systems.

NVIDIA

NVIDIA, a leading manufacturer of graphics processors and AI computing hardware, has a high-severity local vulnerability (CVSS 7.8) that requires…

Apple

Apple, a major technology company known for iPhones, Macs, and iOS/macOS operating systems, has a high-severity vulnerability (CVSS 8.8) reported by…