13 matches found
CVE-2026-53939
A flaw was found in cjose. When encrypting a JSON Web Encryption JWE object using AES-CBC-HMAC algorithms, the library initializes the encryption key with all-zero bytes instead of generating a secure random key. As a result, an attacker who intercepts the encrypted message can decrypt sensitive...
CVE-2023-20572: Observable Timing Discrepancy
An observable timing discrepancy in the ASP could allow a privileged attacker to perform a brute-force attack against the hash message authentication code, allowing the input of an arbitrary message, potentially leading to a loss of data integrity...
PT-2025-6390
Name of the Vulnerable Software and Affected Versions ASP affected versions not specified Description An integer overflow could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity. Recommendations At the moment, there is no information...
CVE-2023-20507: Integer Overflow or Wraparound
An integer overflow in the ASP could allow a privileged attacker to perform an out-of-bounds write, potentially resulting in loss of data integrity...
CVE-2024-4465
CVE-2024-4465 describes an access control vulnerability in the Reports section of Guardian/CMC prior to version 24.2.0. A logged-in user with reporting privileges can discover a method to create a specific application request and make limited changes to the reporting configuration, risking partia...
CVE-2023-20509: Out-of-bounds Read
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity...
CVE-2024-0798
A privilege escalation vulnerability exists in mintplex-labs/anything-llm, allowing users with 'default' role to delete documents uploaded by 'admin'. Despite the intended restriction that prevents 'default' role users from deleting admin-uploaded documents, an attacker can exploit this...
CVE-2023-29158: Authentication Bypass by Capture-replay
SUBNET PowerSYSTEM Center versions 2020 U10 and prior are vulnerable to replay attacks which may result in a denial-of-service condition or a loss of data integrity...
CVE-2022-34667: Stack-based Buffer Overflow
NVIDIA CUDA Toolkit SDK contains a stack-based buffer overflow vulnerability in cuobjdump, where an unprivileged remote attacker could exploit this buffer overflow condition by persuading a local user to download a specially crafted corrupted file and execute cuobjdump against it locally, which m...
CVE-2022-31609: Improper Authorization
NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure...
PT-2021-13499
Name of the Vulnerable Software and Affected Versions: NVIDIA camera firmware affected versions not specified Description: The issue is related to a multistep, timing-related vulnerability in NVIDIA camera firmware. This vulnerability can be exploited by unauthorized modification of camera...
CVE-2021-1113: Improper Access Control
NVIDIA camera firmware contains a difficult to exploit vulnerability where a highly privileged attacker can cause unauthorized modification to camera resources, which may result in complete denial of service and partial loss of data integrity for all clients...
