Design/Logic Flaw

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior to 11.3...

Input validation

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...

CVE-2021-1065

CVE-2021-1065 affects NVIDIA vGPU manager (part of vGPU software): a vulnerability in the vGPU plugin where input data is not validated, potentially enabling data tampering or denial of service. Affected are vGPU versions 8.x (before 8.6) and 11.0 (before 11.3). NVIDIA’s security guidance indicat...

CVE-2021-1063

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin where an input offset is not validated, causing a buffer overread that can lead to data tampering, information disclosure, or denial of service. Affected are vGPU versions 8.x (before 8.6) and 11.0 (before 11.3). Remediation: upgrade...

CVE-2021-1063

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 pri...

CVE-2021-1058

NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input data size is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior to 11.3...

CVE-2021-1059

The CVE-2021-1059 vulnerability affects the NVIDIA vGPU manager plugin where an unvalidated input index can cause an integer overflow, leading to data tampering, information disclosure, or DoS. Affected: vGPU 8.x (before 8.6) and vGPU 11.0 (before 11.3). Remediation: upgrade to affected fixed ver...

CVE-2021-1058

CVE-2021-1058 – NVIDIA vGPU vulnerability : Affects NVIDIA vGPU software in the guest kernel mode driver and vGPU plugin, where input data size is not validated. This improper validation can lead to data tampering or denial of service. Affected versions are vGPU 8.x (before 8.6) and 11.0 (before ...

CVE-2021-1059

NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not validated, which may lead to integer overflow, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x prior to 8.6 and version 11.0 prior...

Nvidia vGPU manager 输入验证错误漏洞

Nvidia vGPU manager is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. An input validation error...

Nvidia vGPU manager 输入验证错误漏洞

Nvidia vGPU manager is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. An input validation error...

NVIDIA vGPU Manager 输入验证错误漏洞

Nvidia vGPU manager is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. An input validation error...

NVIDIA vGPU Software Input Validation Error Vulnerability

NVIDIA vGPU Software is a management software from NVIDIA that is used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. An input validation...

Nvidia vGPU manager 缓冲区错误漏洞

Nvidia vGPU manager is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. NVIDIA vGPU manager suffer...

Nvidia Warns Windows Gamers of High-Severity Graphics Driver Flaws

Nvidia, which makes gaming-friendly graphics processing units GPUs, on Thursday fixed a slew of high-severity flaws affecting its graphics driver. The vulnerabilities allow bad actors to cripple systems with denial of service attacks, escalate privileges, tamper with data or sniff out sensitive...

CVE-2020-35658

CVE-2020-35658 affects SpamTitan before version 7.09. The vulnerability arises because backups are not encrypted, enabling attackers to tamper with backups and potentially impact data integrity. The NVD entry lists CVSS v2 base score 5.0 (MEDIUM) with network access, low attack complexity, and pa...

PT-2020-5097 · Cisco · Cisco Firepower Management Center +1

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Management Center FMC Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the sftunnel functionality could allow an...

PT-2020-4036 · Microsoft · Sharepoint Foundation +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description: A tampering issue exists due to...

MITMf

MITMf is a framework for Man-In-The-Middle attacks. It is a modular and easily extendible tool that aims to provide a one-stop-shop for network attacks. The framework is based on sergio-proxy and has been rewritten from scratch to address the shortcomings of other tools like Ettercap and Mallory...

USN-4424-1 snapd vulnerabilities

It was discovered that cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices ran on every boot without restrictions. A physical attacker could exploit this to craft cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intende...