NVIDIA Bluefield 2 and Bluefield 3 DPU BMC contains a vulnerability in ipmitool, where a root user may cause code injection by a network call. A successful exploit of this vulnerability may lead to code execution on the OS.
Max CVSS
7.2
EPSS Score
0.06%
Published
2024-01-24
Updated
2024-01-31
NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Max CVSS
8.8
EPSS Score
0.06%
Published
2024-01-12
Updated
2024-01-18
NVIDIA DGX A100 SBIOS contains a vulnerability where an attacker may cause an SMI callout vulnerability that could be used to execute arbitrary code at the SMM level. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure.
Max CVSS
7.8
EPSS Score
0.04%
Published
2024-01-12
Updated
2024-01-19
NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.
Max CVSS
7.8
EPSS Score
0.04%
Published
2024-01-12
Updated
2024-01-19
NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tampering.
Max CVSS
8.0
EPSS Score
0.09%
Published
2024-01-12
Updated
2024-01-19
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service.
Max CVSS
7.5
EPSS Score
0.04%
Published
2024-01-12
Updated
2024-01-19
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.
Max CVSS
7.8
EPSS Score
0.04%
Published
2024-01-12
Updated
2024-01-19
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
Max CVSS
9.8
EPSS Score
0.12%
Published
2024-01-12
Updated
2024-01-18
NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
Max CVSS
9.8
EPSS Score
0.12%
Published
2024-01-12
Updated
2024-01-18
NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges.
Max CVSS
8.2
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-13
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service.
Max CVSS
6.0
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-13
NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure.
Max CVSS
7.5
EPSS Score
0.09%
Published
2024-01-12
Updated
2024-01-18
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
Max CVSS
9.8
EPSS Score
0.12%
Published
2024-01-12
Updated
2024-01-18
NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-14
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-13
NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service.
Max CVSS
5.5
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-13
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering.
Max CVSS
7.1
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-13
NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context.
Max CVSS
7.8
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-14
NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service.
Max CVSS
6.5
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-13
NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
Max CVSS
7.8
EPSS Score
0.04%
Published
2023-11-02
Updated
2023-11-13
NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering.
Max CVSS
7.8
EPSS Score
0.06%
Published
2023-11-02
Updated
2023-11-13
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service.
Max CVSS
7.8
EPSS Score
0.05%
Published
2023-09-20
Updated
2023-09-22
NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial of service, and code execution.
Max CVSS
4.8
EPSS Score
0.04%
Published
2023-09-20
Updated
2023-09-22
NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.
Max CVSS
8.8
EPSS Score
0.05%
Published
2023-09-20
Updated
2023-09-22
NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure.
Max CVSS
8.8
EPSS Score
0.05%
Published
2023-09-20
Updated
2023-09-22
559 vulnerabilities found
1 2 3 4 5 6 ...... 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!