4222 matches found
CVE-2024-8299
CVE-2024-8299 is an Uncontrolled Search Path Element vulnerability affecting ICONICS GENESIS64, ICONICS Suite, MC Works64, and GENESIS32 (all versions). The root cause is DLL hijacking via a local, authenticated attacker storing a specially crafted DLL in a target folder, enabling arbitrary code ...
Security Bulletin: NVIDIA UFM Enterprise, UFM Appliance, UFM CyberAI - November 2024
NVIDIA has released a firmware update for NVIDIA UFM Enterprise, UFM Appliance, and UFM CyberAI. To protect your system, download and install this firmware update from the NVIDIA Enterprise Support Portal. Go to NVIDIA Product Security. Details This section provides a summary of potential...
Exploit for Code Injection in Rejetto Http_File_Server
CVE-2024-23692-poc CVE-2024-23692 is a template injection vu...
CVE-2024-0138
NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...
NVIDIA Base Command Manager 安全漏洞
NVIDIA Base Command Manager is a base command manager from NVIDIA Corporation. A security vulnerability exists in NVIDIA Base Command Manager that stems from a lack of authentication, successful exploitation of which could lead to code execution, denial of service, privilege escalation, informati...
CVE-2024-0138
NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...
CVE-2024-0138
CVE-2024-0138 affects NVIDIA Base Command Manager, specifically the CMDaemon, with a missing authentication vulnerability. Exact impacts listed include code execution, denial of service, privilege escalation, information disclosure, and data tampering. The NVIDIA bulletin states affected versions...
CVE-2024-0138
NVIDIA Base Command Manager contains a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering...
PT-2024-8605 · Nvidia · Nvidia Base Command Manager
Name of the Vulnerable Software and Affected Versions: NVIDIA Base Command Manager affected versions not specified Description: The issue is related to a missing authentication vulnerability in the CMDaemon component. A successful exploit of this vulnerability might lead to code execution, denial...
NVIDIA GPU Display Driver - October 2024 - Lenovo Support US
No description provided...
Time-of-check Time-of-use (TOCTOU) Race Condition
NVIDIA Container Toolkit is vulnerable to Time-of-Check Time-of-Use TOCTOU Race Condition. The vulnerability is due to a TOCTOU flaw in the default configuration, where a specifically crafted container image may gain unauthorized access to the host file system. This can lead to code execution,...
PT-2024-8450
Name of the Vulnerable Software and Affected Versions Laravel versions 6.20.45 through 11.31.0 Description The issue is related to the register argc argv php directive being set to on, allowing users to change the environment used by the framework when handling requests with a special crafted que...
NVIDIA BlueField License Issue Vulnerability
NVIDIA BlueField is a series of data processing units from NVIDIA. NVIDIA BlueField suffers from an authorization issue vulnerability that stems from mishandling of privileges, which can be exploited by an attacker to cause a denial of service, data tampering, and information disclosure...
NVIDIA ConnectX Privilege Issue Vulnerability
NVIDIA ConnectX is a series of intelligent network interface cards. A privilege issue vulnerability exists in NVIDIA ConnectX that stems from mishandling of a privilege issue and can be exploited by an attacker to cause a denial of service, data tampering, and information disclosure...
NVIDIA Container Toolkit < 1.17 Data Tampering
The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.17. It is, therefore, affected by a data tampering vulnerability as referenced in the November 2024 Security Bulletin. - NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where...
AZL-52393 CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
AZL-52452 CVE-2024-0134 affecting package nvidia-container-toolkit for versions less than 1.17.1-1
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...
CVE-2024-0134
NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this...