ZDI Advisories

Linux

Linux kernel vulnerability CVE classified as HIGH severity (CVSS 7.5) requires local access and high-level privileges to exploit, but can result in…

Flowise

Flowise is a popular open-source low-code platform for building AI applications and chatbots.

Flowise

Flowise is an open-source platform for building AI applications and workflows.

AzeoTech

AzeoTech is a software company known for industrial automation and SCADA control systems.

Microsoft

Microsoft has disclosed a low-severity local information disclosure vulnerability (CVSS 3.3) that requires user interaction to exploit but no…

Trend Micro

Trend Micro is a major cybersecurity vendor that provides antivirus, endpoint protection, and cloud security solutions.

Trend Micro

Trend Micro is a well-known cybersecurity software vendor specializing in antivirus, endpoint protection, and threat defense solutions.

Microsoft

Microsoft has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to…

Mozilla

Mozilla, the company behind the Firefox browser and related internet services, has a critical vulnerability (CVSS 8.8) that can be exploited remotely…

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.0) that requires local access and low-level user privileges to exploit, with potential to…

AzeoTech

AzeoTech is a software company known for industrial automation and SCADA/HMI (human-machine interface) platforms.

Microsoft

Microsoft, a major software and cloud services provider, has a high-severity vulnerability (CVSS 7.6) that can be exploited remotely without…

GNU

GNU is the open-source software foundation behind widely-used tools like GCC compiler and core Linux utilities, making this vulnerability potentially…

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely over the network without authentication, though it requires…

Meta

Meta, the social media and technology conglomerate behind Facebook, Instagram, and other platforms, has a high-severity local vulnerability (CVSS…

Meta

Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity vulnerability (CVSS 7.8) that requires local access and user…

Meta

Meta, the social media and technology conglomerate, has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction but…

Meta

Meta, the parent company of Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but…

Meta

Meta, a major social media and technology company, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction but no…

ASUS

ASUS, a major manufacturer of consumer and enterprise computing hardware and components, has a high-severity local privilege escalation vulnerability…

Meta

Meta, the social media and technology conglomerate, has a high-severity local vulnerability (CVSS 7.8) that requires user interaction to exploit but…

Meta

Meta, the social media and technology conglomerate behind Facebook, Instagram, and WhatsApp, has a high-severity local vulnerability (CVSS 7.8) that…

JumpCloud

JumpCloud is a cloud-based directory and identity management platform used for managing user access across IT environments.

ByteDance

ByteDance, the Chinese technology company behind TikTok and other platforms, has a high-severity local vulnerability (CVSS 7.8) that requires user…

Apple

Apple has a local vulnerability (CVE pending) with low severity that requires user interaction to exploit but could lead to minor information…

Apple

Apple has a high-severity vulnerability (CVSS 7.5) that can be exploited remotely without authentication, though it requires user interaction and…

Microsoft

Microsoft has a high-severity vulnerability (CVSS 7.8) that requires local access and user interaction to exploit, but delivers complete system…

Adminer

Adminer is a popular web-based database management tool that allows remote administration of databases.

NGINX

NGINX is a widely-used open-source web server and reverse proxy software that handles traffic for millions of websites globally.

verl

A high-severity vulnerability (CVSS 8.1) has been identified in Verl, affecting the confidentiality, integrity, and availability of impacted systems.