CVE-2024-0096 CVE

NVIDIA ChatRTX for Windows contains a vulnerability in Chat RTX UI, where a user can cause an improper privilege management issue by sending user inputs to change execution flow. A successful exploit of this vulnerability might lead to information disclosure, escalation of privileges, and data...

CVE-2024-0097

Summary (CVE-2024-0097) NVIDIA ChatRTX for Windows has a vulnerability in the ChatRTX UI that can be exploited via interprocess communication between processes, potentially enabling information disclosure, privilege escalation, and data tampering. The security bulletin notes this vulnerability al...

CVE-2024-0088

CVE-2024-0088 affects the NVIDIA Triton Inference Server for Linux. The vulnerability resides in shared memory APIs, where a user can trigger an improper memory access via a network API, with potential consequences described as denial of service and data tampering. The NVIDIA security bulletin in...

CVE-2024-0088 CVE

NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access issue by a network API. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2024-0100 CVE

NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system files. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2024-0088 CVE

NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access issue by a network API. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2024-0100 CVE

NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system files. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2024-0100

Affected software: NVIDIA Triton Inference Server for Linux. Vulnerability: tracing API allows a user to corrupt system files, as described in CVE-2024-0100. Impact: potential denial of service and data tampering (per the CVE entry and NVIDIA bulletin). Root cause / vector: not elaborated beyond ...

CVE-2024-0087 CVE

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privilege...

CVE-2024-0087 CVE

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privilege...

CVE-2024-0087

CVE-2024-0087 refers to a vulnerability in NVIDIA Triton Inference Server for Linux where a user can set the logging location to an arbitrary file; if that file exists, logs are appended to it. This can lead to code execution, denial of service, privilege escalation, information disclosure, and d...

PT-2024-11573 · Nuki · Nuki Bridge V2 +2

Name of the Vulnerable Software and Affected Versions: Nuki Smart Lock versions 3.0 through 3.3.5 Nuki Bridge v1 versions 1.0 through 1.22.0 Nuki Bridge v2 versions 2.0 through 2.13.2 Description: An issue was discovered on certain Nuki Home Solutions devices, where lack of certificate validation...

GLSA-202405-28 : NVIDIA Drivers: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202405-28 NVIDIA Drivers: Multiple Vulnerabilities - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where unexpected untrusted data is parsed, which may lead to code execution, denial of service, escalati...

PT-2024-15341 · Nvidia · Nvidia Chatrtx

Name of the Vulnerable Software and Affected Versions: NVIDIA ChatRTX for Windows affected versions not specified Description: The issue is related to improper privilege management in the ChatRTX UI, which can be exploited through interprocess communication between different processes. This could...

PT-2024-15340 · Nvidia · Nvidia Chatrtx

Name of the Vulnerable Software and Affected Versions: NVIDIA ChatRTX for Windows affected versions not specified Description: The issue is related to improper privilege management in the Chat RTX UI, where user inputs can alter the execution flow, potentially leading to information disclosure,...

PT-2024-15343 · Nvidia · Nvidia Triton Inference Server

Name of the Vulnerable Software and Affected Versions: NVIDIA Triton Inference Server for Linux affected versions not specified Description: The issue is related to a vulnerability in the tracing API, which can be exploited to corrupt system files. This could potentially lead to denial of service...

Security Bulletin: NVIDIA ChatRTX - May 2024

NVIDIA has released a software update for NVIDIA® ChatRTX. To protect your system, download and install this software update from the ChatRTX Download page. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities that this security update addresses and...

CVE-2023-47252

An issue was discovered in PnpSmm in Insyde InsydeH2O with kernel 5.0 through 5.6. There is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not verify data size before getting it from the communication buffer, which could...

PT-2024-13431 · Insyde · Insydeh2O

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O kernel versions 5.0 through 5.6 Description: An issue was discovered in PnpSmm, where there is a possible out-of-bounds access in the SMM communication buffer, leading to tampering. The PNP-related SMI sub-functions do not...

CVE-2024-0082

NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges, information disclosure, and data...