Lucene search
+L

584 matches found

OSV
OSV
added 2025/11/25 6:15 p.m.12 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS7AI score
SaveExploits0References3
NVD
NVD
added 2025/11/25 6:15 p.m.9 views

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

7.6CVSS0.00282EPSS
SaveExploits0References3
NVD
NVD
added 2025/11/25 6:15 p.m.8 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS0.00197EPSS
SaveExploits0References3
NVD
NVD
added 2025/11/25 6:15 p.m.8 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS0.00149EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/11/25 6:10 p.m.5 views

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

7.6CVSS6AI score0.00282EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/25 6:10 p.m.19 views

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

7.6CVSS0.00282EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/25 6:10 p.m.19 views

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web is affected by a Server-Side Request Forgery in the chat API endpoint (likely /chat). The root cause is a vulnerability in the chat API that may allow an attacker to induce information disclosure and denial of service. Public documentation in connected sources...

7.6CVSS6AI score0.00282EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/25 6:7 p.m.20 views

CVE-2025-33205

CVE-2025-33205 affects the NVIDIA NeMo Framework. The issue is a vulnerability in a predefined variable that could cause inclusion of functionality from an untrusted control sphere, potentially leading to code execution. Affected component: NVIDIA NeMo Framework (NeMo, various integrations as per...

7.3CVSS7AI score0.00149EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/25 6:7 p.m.5 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7AI score0.00149EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/25 6:7 p.m.15 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS0.00149EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/11/25 6:6 p.m.5 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS6.7AI score0.00197EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/11/25 6:6 p.m.17 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS0.00197EPSS
SaveExploits0References3
CVE
CVE
added 2025/11/25 6:6 p.m.28 views

CVE-2025-33204

CVE-2025-33204 affects NVIDIA NeMo Framework (all platforms). The vulnerability lies in the NLP/LLM components, where malicious input data can lead to code injection, with potential outcomes including code execution, privilege escalation, information disclosure, and data tampering. According to R...

7.8CVSS6.7AI score0.00197EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.11 views

NVIDIA NeMo Agent ToolKit 代码问题漏洞

NVIDIA NeMo Agent ToolKit is an intelligences optimization toolkit from NVIDIA, Inc. A code issue vulnerability exists in NVIDIA NeMo Agent ToolKit, which stems from a server-side request forgery in the Chat API endpoint that could lead to information disclosure and denial of service...

7.6CVSS6.3AI score0.00282EPSS
SaveExploits0References4
Nvidia
Nvidia
added 2025/11/25 12:0 a.m.13 views

Security Bulletin: NVIDIA NeMo Agent Toolkit - November 2025

NVIDIA has released a software update for NVIDIA® NeMo Agent Toolkit. To protect your system, clone or update this software to version 1.3.0 or later from NVIDIA GitHub. The affected sub-module is https://github.com/NVIDIA/NeMo-Agent-Toolkit-UI. Go to NVIDIA Product Security. To protect your...

7.6CVSS7AI score0.00282EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.8 views

NVIDIA Nemo Framework 安全漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA Corporation. A security vulnerability exists in the NVIDIA Nemo Framework that stems from the presence of function inclusion in predefined variables from an untrusted scope of control, which could lea...

7.3CVSS7.1AI score0.00149EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/25 12:0 a.m.10 views

PT-2025-48064

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.4AI score0.00149EPSS
SaveExploits0References3
Nvidia
Nvidia
added 2025/11/25 12:0 a.m.21 views

Security Bulletin: NVIDIA NeMo Framework - November 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, clone or update this software to version 2.5.1 or later from NVIDIA/NeMo Framework on NVIDIA GitHub and pypi. Go to NVIDIA Product Security...

7.8CVSS7AI score0.00197EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/11/25 12:0 a.m.8 views

NVIDIA Nemo Framework 代码注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code injection vulnerability exists in NVIDIA Nemo Framework that stems from the presence of malicious data in the NLP and LLM components, which could lead to code injection that could result in co...

7.8CVSS7AI score0.00197EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/11/25 12:0 a.m.9 views

PT-2025-48063

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS7.1AI score0.00197EPSS
SaveExploits0References3
Rows per page
Query Builder