ZDI Advisories
658 advisoriesZero Day Initiative vulnerability advisories – published disclosures and upcoming publications.
Linux Kernel Net Scheduler True Link Equalizer Race Condition Local Privilege Escalation Vulnerability
Norton Utilities Ultimate NortonUtilitiesSvc Link Following Local Privilege Escalation Vulnerability
Linux Kernel IGMP Subsystem Race Condition Local Privilege Escalation Vulnerability
BlackBerry QNX KEV File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
Linux Kernel KSMBD Response Header Out-Of-Bounds Read Information Disclosure Vulnerability
Linux Kernel Net Scheduler Connection Tracking Race Condition Local Privilege Escalation Vulnerability
Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability
Linux Kernel Net Scheduler Packet Classifier API Use-After-Free Local Privilege Escalation Vulnerability
Gen Digital CCleaner Link Following Local Privilege Escalation Vulnerability
Cisco Identity Services Engine Missing Authentication for Critical Function Information Disclosure Vulnerability
Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability
NGINX HTTP Dav Module Alias Directive Integer Underflow Remote Code Execution Vulnerability
Cisco Identity Services Engine invokeScript Command Injection Remote Code Execution Vulnerability
Clam AntiVirus 7z Archive Parsing Integer Overflow Remote Code Execution Vulnerability
Trend Micro VPN OpenSSL Configuration Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability
Linux Kernel XFRM Race Condition Local Privilege Escalation Vulnerability
dnsmasq DNSSEC NSEC/NSEC3 Type Bitmap Processing Infinite Loop Denial-of-Service Vulnerability
Linux Kernel Net Scheduler Packet Classifier API Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability
Amazon Smart Plug Insecure Fallback Information Disclosure Vulnerability
Amazon Smart Plug OTA Update Process Improper Certificate Validation Vulnerability
Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability
Home Assistant Green go2rtc Command Injection Remote Code Execution Vulnerability
Amazon Smart Plug OTA Update Process Out-Of-Bounds Write Remote Code Execution Vulnerability
Home Assistant Green mDNS Server-Side Request Forgery Vulnerability
Home Assistant Green Simple Service Discovery Protocol Server-Side Request Forgery Vulnerability
Microsoft Windows Deployment Services Use-After-Free Remote Code Execution Vulnerability
Microsoft Windows UMPDDrvBitBlt Improper Object Management Local Privilege Escalation Vulnerability
Flowise CSV_Agent customReadCSV Code Injection Remote Code Execution Vulnerability
Microsoft Windows win32kfull Use-After-Free Local Privilege Escalation Vulnerability