Lucene search
+L

715 matches found

RedhatCVE
RedhatCVE
•added 2025/03/13 10:27 p.m.•17 views

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

9.8CVSS7.4AI score0.00515EPSS
SaveExploits0References1
OSV
OSV
•added 2025/03/11 8:15 p.m.•17 views

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

9.8CVSS6.2AI score0.00515EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/11 8:15 p.m.•26 views

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

9.8CVSS0.00515EPSS
SaveExploits0References1
CVE
CVE
•added 2025/03/11 7:44 p.m.•90 views

CVE-2025-23360

CVE-2025-23360 affects the NVIDIA NeMo Framework. The vulnerability allows a relative path traversal via arbitrary file write, which could lead to code execution and data tampering. Reported CVSS metrics indicate a high-severity impact (base 9.8 in NVD with network attack vector) and substantial ...

9.8CVSS7.2AI score0.00515EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/03/11 7:44 p.m.•34 views

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

7.1CVSS0.00515EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/03/11 7:44 p.m.•34 views

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

7.1CVSS7.2AI score0.00515EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2025/03/11 7:44 p.m.•23 views

CVE-2025-23360

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

9.8CVSS7.6AI score0.00515EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/03/11 12:00 a.m.•17 views

NVIDIA Nemo Framework 安全漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A security vulnerability exists in NVIDIA Nemo Framework that originates from relative path traversal and could lead to code execution and data tampering...

9.8CVSS7.3AI score0.00515EPSS
SaveExploits0References3
Nvidia
Nvidia
•added 2025/03/11 12:00 a.m.•33 views

Security Bulletin: NVIDIA NeMo - March 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest release from the NeMo-Framework-Launcher Releases page on GitHub. Go to NVIDIA Product Security...

9.8CVSS6.8AI score0.00515EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•3 views

PT-2025-10899

Name of the Vulnerable Software and Affected Versions: NVIDIA Nemo Framework affected versions not specified Description: The issue is related to a relative path traversal problem caused by arbitrary file write, which could lead to code execution and data tampering. Recommendations: At the moment...

9.8CVSS0.00515EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/03/11 12:00 a.m.•2 views

PT-2025-19321

Уязвимость комплексной платформы для тренировки и применения нейронных сетей в области обработки речи и естественного языка NVIDIA NeMo связана с ошибками в обработке относительного пути к каталогу. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код...

9.8CVSS0.00515EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/11 12:00 a.m.•3 views

CVE-2025-23360: Relative Path Traversal

NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering...

9.8CVSS6.2AI score0.00515EPSS
SaveExploits0References1
Chainguard
Chainguard
•added 2025/03/05 9:15 p.m.•21 views

CVE-2025-27516 vulnerabilities

Vulnerabilities for packages: nemo, reflex, openstack-kolla-toolbox-2025.1, openstack-kolla-toolbox-2025.1-fips, tensorflow-cpu-jupyter, checkov, jupyter-docker-stacks, jupyter-base-notebook, text-generation-inference...

8.8CVSS7.4AI score0.00507EPSS
SaveExploits0
Chainguard
Chainguard
•added 2025/03/05 8:40 p.m.•19 views

GHSA-CPWX-VRP4-4PQ7 vulnerabilities

Vulnerabilities for packages: nemo, reflex, openstack-kolla-toolbox-2025.1, openstack-kolla-toolbox-2025.1-fips, tensorflow-cpu-jupyter, checkov, jupyter-docker-stacks, jupyter-base-notebook, text-generation-inference...

5.8AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/02/06 1:12 a.m.•20 views

CVE-2022-21129

Versions of the package nemo-appium before 0.0.9 are vulnerable to Command Injection due to improper input sanitization in the 'module.exports.setup' function. Note: In order to exploit this vulnerability appium-running 0.1.3 has to be installed as one of nemo-appium dependencies...

9.8CVSS7AI score0.02774EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:06 p.m.•14 views

CVE-2024-0081

NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asrwebapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service...

8.6CVSS8.4AI score0.00616EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/14 12:00 a.m.•17 views

The vulnerability of the SaveRestoreConnector function in NVIDIA NeMo’s comprehensive platform for training and applying neural networks in speech processing and natural language processing allows a hacker to execute arbitrary code.

The vulnerability of the SaveRestoreConnector function in NVIDIA NeMo’s comprehensive platform for training and applying neural networks in speech processing and natural language processing is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this...

6.3CVSS8.4AI score0.00243EPSS
SaveExploits0References2
OSV
OSV
•added 2024/10/15 6:15 a.m.•12 views

CVE-2024-0129

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering...

7.8CVSS7.3AI score
SaveExploits0References1
NVD
NVD
•added 2024/10/15 6:15 a.m.•32 views

CVE-2024-0129

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering...

7.8CVSS0.00243EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/10/15 5:39 a.m.•49 views

CVE-2024-0129

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering...

6.3CVSS0.00243EPSS
SaveExploits0References1
Rows per page
Query Builder