4394 matches found
CVE-2022-42279
CVE-2022-42279 is a public vulnerability in NVIDIA BMC SPX REST API where an authorized attacker can inject shell commands, potentially enabling code execution, DoS, information disclosure, and data tampering. Connected advisories confirm affected product lines as NVIDIA DGX Station A100/A800 BMC...
CVE-2022-42278
NVIDIA BMC vulnerability CVE-2022-42278 affects the SPX REST API in NVIDIA BMC. An authorized attacker could read/write arbitrary memory within the IPMI server process, potentially enabling code execution, denial of service, information disclosure, or data tampering. Affected system: NVIDIA BMC/S...
CVE-2022-42278
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering...
CVE-2022-42278
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context of the IPMI server process, which may lead to code execution, denial of service, information disclosure and data tampering...
NVIDIA Omniverse Kit 代码注入漏洞
The NVIDIA Omniverse Kit is a powerful toolkit from NVIDIA, Inc. for developers to build their own applications, microservices, or plug-ins for their ecosystems. A security vulnerability exists in NVIDIA Omniverse Kit. An attacker could exploit this vulnerability to craft a USD file containing...
NVIDIA BMC 操作系统命令注入漏洞
NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could inject arbitrary shell commands, which could lead to code execution, denial of service, information disclosure, and data tampering...
NVIDIA BMC 安全漏洞
NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could read and write to arbitrary locations within the IPMI server process, which could lead to code execution, denial of service, information...
NVIDIA DGX 安全漏洞
NVIDIA DGX is a high-performance workstation for deep learning applications from NVIDIA. A security vulnerability exists in the NVIDIA DGX A100 SBIOS. An attacker exploiting this vulnerability could disable SPI flash protection, which could lead to denial of service, privilege escalation, or data...
NVIDIA BMC 操作系统命令注入漏洞
NVIDIA BMC is an OpenBMC open software framework from NVIDIA. A security vulnerability exists in NVIDIA BMC. An attacker exploiting this vulnerability could inject arbitrary shell commands, which could lead to code execution, denial of service, information disclosure, and data tampering...
PT-2023-14086 · Nvidia · Dgx A100 Sbios
Name of the Vulnerable Software and Affected Versions: DGX A100 SBIOS affected versions not specified Description: The issue concerns a vulnerability in the Pre-EFI Initialization PEI phase, where a privileged user can disable SPI flash protection. This may lead to denial of service, escalation o...
CVE-2022-42285: Improper Prevention of Lock Bit Modification
DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization PEIphase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering...
NVIDIA BMC 操作系统命令注入漏洞
NVIDIA BMC is an OpenBMC open software framework from NVIDIA. NVIDIA BMC has a security vulnerability that stems from its SPX REST API that allows an authorized attacker to inject arbitrary shell commands resulting in code execution, denial of service, information disclosure, and data tampering...
CVE-2022-42287: Improper Limitation of a Pathname to a Restricted Directory
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances, which may lead to denial of service, escalation of privileges, information disclosure and data tampering...
PT-2023-14091 · Nvidia · Nvidia Bmc
Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the SPX REST API of NVIDIA BMC, allowing an authorized attacker to inject arbitrary shell commands. This could lead to code execution, denial of...
PT-2023-14080 · Nvidia · Nvidia Bmc
Name of the Vulnerable Software and Affected Versions: NVIDIA BMC affected versions not specified Description: The issue concerns a vulnerability in the SPX REST API of NVIDIA BMC, allowing an authorized attacker to inject arbitrary shell commands. This could potentially lead to code execution,...
CVE-2022-42268
Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description USD files to customize all aspects of a scene. If a user opens a USD file th...
CVE-2022-42268
The CVE-2022-42268 issue affects NVIDIA Omniverse Kit components (Audio2Face, Create, Isaac Sim, View, Code, Machinima). A vulnerability allows executable Python code embedded in USD files to run with the user’s privileges when opened, enabling information disclosure, data tampering, and denial o...
CVE-2022-42268: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications allow executable Python code to be embedded in Universal Scene Description USD files to customize all aspects of a scene. If a user opens a USD file th...
