ZDI Advisories
1128 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
Linux
A high-severity vulnerability (CVSS 7.5) has been discovered in Linux that requires local access and high-level privileges to exploit, but can result…
GIMP
GIMP is a widely-used open-source image editing software that allows users to create and modify graphics.
Ashlar-Vellum
Ashlar-Vellum is a CAD and design software company known for products like Vellum and Cobalt used in architecture and engineering.
Ashlar-Vellum
Ashlar-Vellum is a software company known for CAD and design applications.
ByteDance
ByteDance, the Chinese technology company behind TikTok and other platforms, has a high-severity local vulnerability (CVSS 7.8) that requires user…
JumpCloud
JumpCloud is a cloud-based directory and identity management platform used for managing user access across IT environments.
Trend Micro
Trend Micro, a major cybersecurity and antivirus software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that…
Trend Micro
Trend Micro is a major cybersecurity company known for antivirus, endpoint protection, and cloud security solutions.
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires low-level…
Trend Micro
Trend Micro, a major cybersecurity software vendor, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local…
Trend Micro
Trend Micro is a major cybersecurity software vendor known for antivirus, endpoint protection, and threat defense solutions.
CrewAI
CrewAI is an open-source framework for building multi-agent AI systems.
Airbyte
Airbyte is a popular open-source data integration platform used for ETL/ELT operations.
Trend Micro
Trend Micro is a well-known cybersecurity company specializing in antivirus, endpoint protection, and threat defense solutions.
JumpCloud
JumpCloud is a cloud-based directory and identity management platform used by organizations for user authentication and device management.
Trend Micro
Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security solutions.
Airbyte
Airbyte is a popular open-source data integration platform that allows users to sync data between various sources and destinations.
Trend Micro
This vulnerability affects Trend Micro, a major cybersecurity software vendor known for antivirus and endpoint protection products.
QEMU
QEMU is a widely-used open-source virtualization platform that emulates hardware to run virtual machines.
Fuji Electric
Fuji Electric, a major Japanese manufacturer of industrial automation and power systems equipment, has a high-severity local privilege escalation…
Fuji Electric
Fuji Electric, a major Japanese industrial automation and power systems manufacturer, has a medium-severity vulnerability (CVSS 5.5) in one of their…
Trend Micro
Trend Micro is a well-known cybersecurity software vendor that produces antivirus, endpoint protection, and threat defense solutions.
Trend Micro
Trend Micro is a major cybersecurity vendor known for antivirus, endpoint protection, and cloud security products.
Allegra
Allegra's product contains a medium-severity vulnerability (CVSS 4.6) that can be exploited remotely by an authenticated user through a clickable…
All Hands
A critical remote code execution vulnerability (CVSS 9.8) has been discovered in All Hands' product that requires no authentication or user…
BusyBox
BusyBox is a widely-used lightweight Unix utility suite commonly embedded in Linux distributions, IoT devices, and embedded systems.
Trend Micro
Trend Micro is a well-established cybersecurity software vendor known for antivirus, endpoint protection, and cloud security solutions.
EmbedThis
EmbedThis is a vendor known for embedded web server and IoT connectivity software used in various networked devices.
Trend Micro
Trend Micro, a major cybersecurity and antivirus software vendor, has a medium-severity vulnerability (CVSS 5.3) that allows authenticated attackers…
Quest
Quest Software, known for IT management and security solutions, has a critical remote vulnerability (ZDI-CAN-28202) with a CVSS score of 8.8 that…