The software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, are vulnerable to being exploited by attackers, allowing them to alter arbitrary data.

The vulnerability of software for creating and running NVIDIA Container Toolkit containers, as well as software for managing NVIDIA GPU resources, is related to the swapping of the zero pointer due to concurrent access to resources. Exploiting this vulnerability allows a remote attacker to modify...

Fedora 41 : golang-github-nvidia-container-toolkit (2024-cd6112750e)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-cd6112750e advisory. Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch Tenable has extracted the preceding descriptio...

CVE-2024-26017

Uncontrolled search path in some IntelR Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-26017

Uncontrolled search path in some IntelR Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-26017

Uncontrolled search path in some IntelR Rendering Toolkit software before version 2024.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-26017

CVE-2024-26017 involves an uncontrolled search path in Intel® Rendering Toolkit software prior to version 2024.1.0 that could allow an authenticated user to escalate privileges via local access. Affected products/areas include Intel® Embree, Open Image Denoise, Open Path Guiding Library (Open PGL...

WordPress AWcode Toolkit plugin <= 1.0.14 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Le Ngoc Anh in WordPress Plugin AWcode Toolkit versions = 1.0.14...

[SECURITY] Fedora 41 Update: golang-github-nvidia-container-toolkit-1.16.2-1.fc41

The NVIDIA Container Toolkit allows users to build and run NVIDIA GPU accelerated containers. The toolkit includes a container runtime library and utilities to automatically configure containers to leverage NVIDIA GPUs...

[SECURITY] Fedora 40 Update: golang-github-nvidia-container-toolkit-1.16.2-1.fc40

The NVIDIA Container Toolkit allows users to build and run NVIDIA GPU accelerated containers. The toolkit includes a container runtime library and utilities to automatically configure containers to leverage NVIDIA GPUs...

Intel Distribution of OpenVINO(TM) Toolkit 输入验证错误漏洞

The Intel Distribution of OpenVINOTM Toolkit is an application and solution for developing applications and solutions that use deep learning intelligence from Intel USA. Based on convolutional neural networks CNNs, the toolkit scales workloads across Intel® hardware, including gas pedals, and...

Fedora: Security Advisory (FEDORA-2024-8c218846ee)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ROS-20241112-06

The XML toolkit vulnerability for Ruby REXML is related to inefficient regular expression complexity expressions. Exploitation of the vulnerability could allow an attacker acting remotely to perform a denial of service attack using regular expressions. denial-of-service attack using regular...

Fedora 40 : golang-github-nvidia-container-toolkit (2024-8c218846ee)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-8c218846ee advisory. Update to 1.16.2 Fixes CVE-2024-0132 or GHSA-mjjw-553x-87pq, and CVE-2024-0133 or GHSA-f748-7hpg-88ch Tenable has extracted the preceding descriptio...

geotils (=0.3.0.post2), ipp-toolkit (=0.1.2) +1 more potentially affected by CVE-2024-49048 via torchgeo (>=0.4.1 <=0.5.2)

torchgeo PYPI version =0.4.1, =0.1.0, =0.1.1 Source cves: CVE-2024-49048 Source advisory: SNYK:PYTHON-TORCHGEO-8370211...

geotils (=0.3.0.post2), ipp-toolkit (=0.1.2) +1 more potentially affected by CVE-2024-49048 via torchgeo (>=0.4.1 <=0.5.2)

torchgeo PYPI version =0.4.1, =0.1.0, =0.1.1 Source cves: CVE-2024-49048 Source advisory: OSV:PYSEC-2024-204...

gtk3: gtk2: Library injection from CWD

A flaw was found in the GTK library. Under certain conditions, it is possible for a library to be injected into a GTK application from the current working directory...

Arbitrary File Creation

github.com/nvidia/nvidia-container-toolkit is vulnerable to arbitrary file creation. The vulnerability is due to the default mode of operation, which allows a specially crafted container image to interact with the host file system and create empty files...

PT-2024-8784 · Intel · Intel Rendering Toolkit

Name of the Vulnerable Software and Affected Versions: Intel Rendering Toolkit versions prior to 2024.1.0 Description: The issue is related to an uncontrolled search path in some Intel Rendering Toolkit software. This may allow an authenticated user to potentially enable escalation of privilege v...

Intel® Rendering Toolkit Software Advisory

Summary: A potential security vulnerability in some Intel® Rendering Toolkit software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-26017 Description: Uncontrolled search path in some Intel®...

CVE-2024-51595

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in sksdev SKSDEV Toolkit allows Stored XSS.This issue affects SKSDEV Toolkit: from n/a through 1.0.0...