Lucene search
+L

244 matches found

CNNVD
CNNVD
added 2025/08/13 12:00 a.m.10 views

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that originates in the megatron/training/arguments.py component, which can be exploited b...

7.8CVSS7.8AI score0.00207EPSS
SaveExploits0References3
Nvidia
Nvidia
added 2025/08/12 12:00 a.m.20 views

Security Bulletin: NVIDIA Megatron LM - August 2025

NVIDIA has released a software update for NVIDIA® Megatron LM. To protect your system, clone or update this software to version 0.12.2 or later from Releases · NVIDIA/Megatron-LM on GitHub. Go to NVIDIA Product Security...

7.8CVSS7.1AI score0.00207EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/06/26 4:20 p.m.11 views

CVE-2025-23265

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

7.8CVSS7.5AI score0.00274EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/24 4:15 p.m.15 views

CVE-2025-23264

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

7.8CVSS0.00274EPSS
SaveExploits0References1
Snyk
Snyk
added 2025/06/24 3:46 p.m.5 views

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection via the file uploading process. An attacker can execute arbitrary code, escalate privileges, access...

8.5CVSS7.9AI score0.00274EPSS
SaveExploits0References2
Snyk
Snyk
added 2025/06/24 3:46 p.m.6 views

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection via the file uploading process. An attacker can execute arbitrary code, escalate privileges, access...

8.5CVSS8.2AI score0.00274EPSS
SaveExploits0References2
CVE
CVE
added 2025/06/24 3:29 p.m.51 views

CVE-2025-23265

NVIDIA Megatron-LM vulnerable in a Python component to Arbitrary Code Injection via a malicious file, potentially enabling Code Execution, Privilege Escalation, Information Disclosure and Data Tampering. Remediation per NVIDIA advisory: upgrade to Megatron-LM 0.12.1 or later (from NVIDIA’s bullet...

7.8CVSS7.4AI score0.00274EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/06/24 3:29 p.m.19 views

CVE-2025-23265

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

7.8CVSS0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/24 3:29 p.m.10 views

CVE-2025-23265

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

7.8CVSS7.1AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/06/24 3:29 p.m.5 views

CVE-2025-23265

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

7.8CVSS7.4AI score0.00274EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/06/24 3:21 p.m.18 views

CVE-2025-23264

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

7.8CVSS0.00274EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/24 3:21 p.m.10 views

CVE-2025-23264

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

7.8CVSS7.1AI score
SaveExploits0References3
CVE
CVE
added 2025/06/24 3:21 p.m.38 views

CVE-2025-23264

CVE-2025-23264 affects NVIDIA Megatron-LM across platforms due to a vulnerability in a Python component that allows code injection via a malicious file. Exploitation may lead to Code Execution, Privilege Escalation, Information Disclosure, and Data Tampering. Public sources (NVD/Red Hat) describe...

7.8CVSS7.4AI score0.00274EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/06/24 3:21 p.m.9 views

CVE-2025-23264

NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data...

7.8CVSS7.4AI score0.00274EPSS
SaveExploits0References1
Nvidia
Nvidia
added 2025/06/24 12:00 a.m.17 views

Security Bulletin: NVIDIA Megatron LM - June 2025

NVIDIA has released a software update for NVIDIA® Megatron LM. To protect your system, clone or update this software to version 0.12.1 or later from Releases · NVIDIA/Megatron-LM on GitHub. Go to NVIDIA Product Security...

7.8CVSS7.1AI score0.00274EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/24 12:00 a.m.16 views

PT-2025-26750 · Nvidia · Nvidia Megatron-Lm

Name of the Vulnerable Software and Affected Versions: NVIDIA Megatron-LM affected versions not specified Description: The issue concerns a code injection vulnerability in a python component of NVIDIA Megatron-LM. An attacker can exploit this by providing a malicious file, potentially leading to...

7.8CVSS7.7AI score0.00274EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2025/06/24 12:00 a.m.13 views

PT-2025-26749 · Nvidia · Nvidia Megatron-Lm

Name of the Vulnerable Software and Affected Versions: NVIDIA Megatron-LM affected versions not specified Description: The issue concerns a code injection vulnerability in a python component of NVIDIA Megatron-LM. An attacker can exploit this by providing a malicious file, potentially leading to...

7.8CVSS7.7AI score0.00274EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2025/06/24 12:00 a.m.9 views

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that stems from a python component that could allow an attacker to perform code injection...

7.8CVSS7.6AI score0.00274EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/06/24 12:00 a.m.12 views

NVIDIA Megatron-LM 代码注入漏洞

NVIDIA Megatron-LM is a PyTorch-based distributed training framework from NVIDIA that specializes in training large Transformer language models. NVIDIA Megatron-LM suffers from a code injection vulnerability that stems from a python component that could allow an attacker to perform code injection...

7.8CVSS7.6AI score0.00274EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2024/09/24 5:50 a.m.767 views

Exploit for SQL Injection in Woobewoo Product_Table

Wordpress WBW Product Table Pro = 1.9.4 - Unauthenticated Arb...

10CVSS10AI score0.02084EPSS
SaveExploits12
Rows per page
Query Builder