Lucene search
+L

281 matches found

RedhatCVE
RedhatCVE
added 2025/02/04 11:6 p.m.5 views

CVE-2024-0081

NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asrwebapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service...

8.6CVSS8.4AI score0.00611EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.11 views

The vulnerability of the SaveRestoreConnector function in NVIDIA NeMo’s comprehensive platform for training and applying neural networks in speech processing and natural language processing allows a hacker to execute arbitrary code.

The vulnerability of the SaveRestoreConnector function in NVIDIA NeMo’s comprehensive platform for training and applying neural networks in speech processing and natural language processing is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this...

6.3CVSS8.4AI score0.00243EPSS
Exploits0References2
NVD
NVD
added 2024/10/15 6:15 a.m.25 views

CVE-2024-0129

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering...

7.8CVSS0.00243EPSS
Exploits0References1
OSV
OSV
added 2024/10/15 6:15 a.m.7 views

CVE-2024-0129

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering...

7.8CVSS7.3AI score
Exploits0References1
Cvelist
Cvelist
added 2024/10/15 5:39 a.m.32 views

CVE-2024-0129

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering...

6.3CVSS0.00243EPSS
Exploits0References1
CVE
CVE
added 2024/10/15 5:39 a.m.70 views

CVE-2024-0129

CVE-2024-0129 affects NVIDIA NeMo, specifically the SaveRestoreConnector where unsafe extraction of .tar files can trigger a path traversal vulnerability. The issue may lead to code execution and data tampering. NVIDIA’s advisory patches NeMo up to version r2.0.0rc0; upgrading to this version (or...

7.8CVSS7.4AI score0.00243EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/10/15 12:0 a.m.5 views

NVIDIA NeMo 安全漏洞

NVIDIA NeMo is a toolkit for building new state-of-the-art conversational Ai models from NVIDIA. A security vulnerability exists in NVIDIA NeMo that originates from a path traversal issue that may be caused by a user extracting from an insecure .tar file, which could lead to code execution and da...

7.8CVSS9.2AI score0.00243EPSS
Exploits0References2
Nvidia
Nvidia
added 2024/10/15 12:0 a.m.24 views

Security Bulletin: NVIDIA NeMo - October 2024

NVIDIA has released a software update for NVIDIA® NeMo. To protect your system, download and install this software update from the Releases tab on the NeMo Github page. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities that this security update...

7.8CVSS7.5AI score0.00243EPSS
Exploits0
PyPA
PyPA
added 2024/04/05 7:15 p.m.11 views

PYSEC-2024-289

NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asrwebapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service...

8.6CVSS5.8AI score0.00611EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/04/05 7:15 p.m.13 views

PYSEC-2024-289

NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asrwebapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service...

7.5CVSS5.8AI score0.00611EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/05 12:0 a.m.7 views

NVIDIA NeMo 安全漏洞

NVIDIA NeMo is a toolkit for building new state-of-the-art conversational Ai models from NVIDIA. A security vulnerability exists in NVIDIA NeMo that stems from an improper allocation of resources, which can lead to a denial of service on the system...

8.6CVSS6.5AI score0.00611EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/05 12:0 a.m.9 views

PT-2024-15336 · Nvidia · Nvidia Nemo

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo framework for Ubuntu affected versions not specified Description: The NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr webapp where an attacker may cause an allocation of resources without limits or throttlin...

8.6CVSS6.7AI score0.00611EPSS
Exploits0References5
Github Security Blog
Github Security Blog
added 2022/02/15 1:57 a.m.17 views

Arbitrary file deletion in NeMo ASR webapp

Description NVIDIA NeMo contains a vulnerability in ASR WebApp, where Relative Path Traversal CWE-23 may lead to deletion of any directory through the "../" structure when admin privileges are available. CVSS Score = 2.0...

0.6AI score
Exploits0References3Affected Software1
Github Security Blog
Github Security Blog
added 2022/01/11 12:0 a.m.19 views

Path Traversal in nemo-toolkit

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

4.4CVSS5.4AI score0.00298EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2022/01/11 12:0 a.m.24 views

GHSA-9HG3-HMMF-C3GR Path Traversal in nemo-toolkit

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

4.4CVSS4.5AI score0.00298EPSS
Exploits0References3
NVD
NVD
added 2022/01/10 2:12 p.m.23 views

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

4.4CVSS0.00298EPSS
Exploits0References1
Prion
Prion
added 2022/01/10 2:12 p.m.11 views

Path traversal

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

2.1CVSS4.7AI score0.00298EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2022/01/10 12:0 a.m.6 views

NVIDIA NeMo 路径遍历漏洞

Nvidia NeMo is a toolkit for building new state-of-the-art conversational Ai models from Nvidia, USA. A security vulnerability exists in versions of NVIDIA NeMo prior to 1.6.0 that could result in the deletion of any directory when administrator privileges are available...

4.4CVSS5.1AI score0.00298EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/01/08 2:35 a.m.7 views

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

4.4CVSS5.8AI score0.00298EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/01/08 2:35 a.m.20 views

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

2CVSS5AI score0.00298EPSS
Exploits0References1
Rows per page
Query Builder