CVE-2023-0200

NVIDIA DGX-2 contains a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffers end, which may lead to code execution, escalation of privileges, denial of service, and information disclosure...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS that originates from an attacker being able to modify arbitrary memory in SMRAM using the GenericSio and LegacySmmSredir SMM APIs, which could resu...

PT-2023-16079 · Nvidia · Nvidia Dgx-2

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX-2 affected versions not specified Description: The issue is related to a vulnerability in OFBD where a user with high privileges and a pre-conditioned heap can cause an access beyond a buffer's end. This may lead to code execution,...

NVIDIA DGX 安全漏洞

NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS prior to version 1.18, which stems from an attacker being able to modify arbitrary memory in SMRAM by utilizing the NVME SMM API, which could resul...

The vulnerability of the JSE component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to disclose protected information or create, delete, or alter access to data.

The vulnerability of the JSE component of Oracle Java SE software and the Oracle GraalVM Enterprise Edition virtual machine is related to the lack of integrity checks for messages. Exploiting this vulnerability can allow an attacker to disclose protected information or create, delete, or alter...

PT-2023-16085 · Nvidia · Nvidia Dgx A100 Sbios

Name of the Vulnerable Software and Affected Versions: NVIDIA DGX A100 SBIOS affected versions not specified Description: The issue allows an attacker to modify arbitrary memory of SMRAM by exploiting the NVME SMM API, potentially leading to denial of service, escalation of privileges, and...

NVIDIA DGX-2 缓冲区错误漏洞

The NVIDIA DGX-2 is a high-performance workstation for deep learning from NVIDIA, Inc. The NVIDIA DGX-2™ is NVIDIA's first 2 petaFLOPS appliance with 16 NVIDIA V100 Tensor core GPUs, making it an excellent platform for tackling complex AI challenges. A security vulnerability exists in NVIDIA DGX-...

CVE-2023-27354

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of Sonos One Speaker 70.3-35220. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the SMB directory query command. The...

CVE-2023-22321

Datakit CrossCadWarex64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information...

CVE-2023-22846

Datakit CrossCadWarex64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information...

Design/Logic Flaw

Datakit CrossCadWarex64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerability could allow an attacker to disclose sensitive information...

OpenJDK: incorrect enqueue of references in garbage collector (8298191)

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1. Difficult to exploit...

Mozilla Firefox 资源管理错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox. An attacker could exploit this vulnerability to cause a denial of service, which could be exploited to obtain sensitive information or execute...

Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure

The plugin does not have proper authorization or nonce values for some POST requests, leading to unauthenticated data disclosure. In version 4.1.0 a nonce check was added to the request, but it still lacked authorization. PoC The admininit hook calls MoLdapLocalLogin class loginwidgetsaveoptions...

Fortinet FortiAnalyzer Input Validation Error Vulnerability

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

CVE-2023-27647

An issue found in DUALSPACE Lock Master v.2.2.4 allows a local attacker to cause a denial of service or gain sensitive information via the com.ludashi.superlock.util.pref.SharedPrefProviderEntryMethod: insert of the android.net.Uri.insert method...

DUALSPACE Lock Master 安全漏洞

DUALSPACE Lock Master is a smart and secure Android app lock from DUALSPACE. A security vulnerability exists in DUALSPACE Lock Master version 2.2.4, which stems from the presence of a denial of service and disclosure of sensitive information...

CVE-2022-25726

Information disclosure in modem data due to array out of bound access while handling the incoming DNS response packet...

USN-6010-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2023-29537, CVE-2023-29540,...

The vulnerability of the Samba networking communication package lies in the lack of protection for service data, which allows attackers to disclose the protected information.

The vulnerability of the Samba networking communication package is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...