Lucene search
+L

3968 matches found

Prion
Prion
•added 2021/10/29 8:15 p.m.•27 views

Design/Logic Flaw

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a string provided by the guest OS may not be properly null terminated. The guest OS or attacker has no ability to push content to the plugin through this vulnerability, which may lead to information...

4.6CVSS6.9AI score0.00236EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2021/10/29 7:30 p.m.•66 views

CVE-2021-1120

CVE-2021-1120 affects NVIDIA vGPU software, specifically the Virtual GPU Manager (vGPU plugin). The issue arises when a string provided by the guest OS may not be properly terminated with a null character, potentially enabling information disclosure, data tampering, unauthorized code execution, a...

7CVSS7AI score0.00236EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/10/29 7:30 p.m.•37 views

CVE-2021-1120

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a string provided by the guest OS may not be properly null terminated. The guest OS or attacker has no ability to push content to the plugin through this vulnerability, which may lead to information...

7CVSS7.2AI score0.00236EPSS
SaveExploits0References1
CVE
CVE
•added 2021/10/29 7:30 p.m.•66 views

CVE-2021-1118

CVE-2021-1118 affects NVIDIA vGPU software (Virtual GPU Manager) and its vGPU plugin. The vulnerability could allow a guest OS to perform privileged operations, potentially leading to information disclosure, data tampering, privilege escalation, and denial of service. Public documentation in the ...

7.8CVSS7.7AI score0.00375EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/10/29 7:30 p.m.•30 views

CVE-2021-1118

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where there is the potential to execute privileged operations by the guest OS, which may lead to information disclosure, data tampering, escalation of privileges, and denial of service...

7.8CVSS7.9AI score0.00375EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/29 12:00 a.m.•14 views

PT-2021-13508 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software affected versions not specified Description: The issue is related to the Virtual GPU Manager vGPU plugin in NVIDIA vGPU software, where the guest OS can potentially execute privileged operations. This may lead to...

7.8CVSS7.5AI score0.00375EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2021/10/29 12:00 a.m.•14 views

NVIDIA vGPU Software 安全漏洞

Nvidia vGPU Software is a management software from Nvidia Corporation to provide GPU capabilities to virtual machines. NVIDIA vGPU software contains a security vulnerability that could be exploited by attackers to cause information disclosure, data tampering, privilege escalation, and denial of...

7.8CVSS5.6AI score0.00375EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/10/29 12:00 a.m.•12 views

Nvidia vGPU Software 安全漏洞

Nvidia vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. A security vulnerability...

7CVSS7.1AI score0.00236EPSS
SaveExploits0References3
Huntr
Huntr
•added 2021/10/22 5:25 p.m.•13 views

SQL Injection in forkcms/forkcms

Description When calling the url for deleting one or more tags, the parameter id is vulnerable for SQL injection. Proof of Concept Call an URL like this one as an authenticated user. http://forkcms.site/private/de/tags/massaction?token=n93e05rj0l&id=3;insert into usersemail,password,isgod values...

0.6AI score
SaveExploits0
OSV
OSV
•added 2021/10/20 11:17 a.m.•9 views

AZL-6709 CVE-2021-35602 affecting package mysql for versions less than 8.0.28-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Options. Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

5CVSS6.4AI score0.01939EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2021/08/30 8:05 a.m.•8 views

OpenJDK: Incorrect verification of JAR files with multiple MANIFEST.MF files (Library, 8260967)

Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Library. Supported versions that are affected are Java SE: 7u301, 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Easily exploitable vulnerability allows...

4.3CVSS6.9AI score0.03444EPSS
SaveExploits0References4
zdt
zdt
•added 2021/08/18 12:00 a.m.•139 views

Crime records Management System 1.0 - Multiple SQL Injection (Authenticated) Vulnerability

Exploit Title: Crime records Management System 1.0 - 'Multiple' SQL Injection Authenticated Exploit Author: Davide 't0rt3ll1n0' Taraschi Vendor Homepage: https://www.sourcecodester.com/users/osman-yahaya Software Link:...

0.7AI score
SaveExploits0
NVD
NVD
•added 2021/08/13 4:15 p.m.•18 views

CVE-2021-1104

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address MTVEC register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of servic...

9.8CVSS0.01663EPSS
SaveExploits1References1
Prion
Prion
•added 2021/08/13 4:15 p.m.•22 views

Information disclosure

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address MTVEC register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of servic...

7.5CVSS9AI score0.01663EPSS
SaveExploits1References1
CVE
CVE
•added 2021/08/13 3:40 p.m.•88 views

CVE-2021-1104

The CVE-2021-1104 entry relates to the RISC-V Instruction Set Manual, where an ambiguity in the Machine Trap Vector Base Address (MTVEC) register’s initial state is not defined. This ambiguity is stated to potentially enable information disclosure, data tampering, and denial of service. The conso...

9.8CVSS9.1AI score0.01663EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/08/13 3:40 p.m.•34 views

CVE-2021-1104

The RISC-V Instruction Set Manual contains a documented ambiguity for the Machine Trap Vector Base Address MTVEC register that may lead to a vulnerability due to the initial state of the register not being defined, potentially leading to information disclosure, data tampering and denial of servic...

9.4AI score0.01663EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/08/13 12:00 a.m.•7 views

RISC-V 注入漏洞

RISC-V is an open source instruction set architecture based on the principle of reduced instruction sets, which is easily interpreted as a form of "open source hardware" corresponding to the open source software movement. RISC-V suffers from an injection vulnerability that arises from an ambiguit...

9.8CVSS8.3AI score0.01663EPSS
SaveExploits1References1
NVD
NVD
•added 2021/08/11 10:15 p.m.•37 views

CVE-2021-1106

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system...

7.8CVSS0.00257EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/08/11 10:15 p.m.•7 views

CVE-2021-1106

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system...

7.8CVSS5.5AI score0.00257EPSS
SaveExploits0References3
Prion
Prion
•added 2021/08/11 10:15 p.m.•32 views

Information disclosure

NVIDIA Linux kernel distributions contain a vulnerability in nvmap, where writes may be allowed to read-only buffers, which may result in escalation of privileges, complete denial of service, unconstrained information disclosure, and serious data tampering of all processes on the system...

4.6CVSS7.5AI score0.00257EPSS
SaveExploits0References2Affected Software2
Rows per page
Query Builder