Lucene search
+L

406 matches found

BDU FSTEC
BDU FSTEC
•added 2025/11/29 12:00 a.m.•26 views

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in the fact that it allows unauthorized users to execute arbitrary code. This vulnerability stems from the inclusion of functions from an unverified and uncontrolled area.

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing lies in the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow attackers to execute arbitra...

7.3CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/29 12:00 a.m.•22 views

The vulnerabilities of the NLP and LLM components of the NVIDIA NeMo comprehensive platform for training and applying neural networks in speech processing and natural language processing allow a perpetrator to execute arbitrary codes, enhance their privileges, and gain unauthorized access to protected information.

The vulnerability of the NLP and LLM components of the NVIDIA NeMo comprehensive platform for training and applying neural networks in speech processing and natural language processing is related to improper code generation management. Exploiting this vulnerability can allow attackers to execute...

7.8CVSS7.1AI score0.00203EPSS
SaveExploits0References2Affected Software1
RedhatCVE
RedhatCVE
•added 2025/11/27 4:59 p.m.•20 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS7.3AI score0.00203EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/11/27 4:59 p.m.•24 views

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

7.6CVSS7.1AI score0.00291EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/25 6:32 p.m.•18 views

EUVD-2025-199609

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS7.3AI score0.00203EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/25 6:32 p.m.•18 views

EUVD-2025-199611

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

7.6CVSS7.1AI score0.00291EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/11/25 6:32 p.m.•18 views

EUVD-2025-199613

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.5AI score0.00154EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/25 6:15 p.m.•18 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS0.00203EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/25 6:15 p.m.•20 views

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

7.6CVSS0.00291EPSS
SaveExploits0References3
NVD
NVD
•added 2025/11/25 6:15 p.m.•16 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS0.00154EPSS
SaveExploits0References3
CVE
CVE
•added 2025/11/25 6:10 p.m.•34 views

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web is affected by a Server-Side Request Forgery in the chat API endpoint (likely /chat). The root cause is a vulnerability in the chat API that may allow an attacker to induce information disclosure and denial of service. Public documentation in connected sources...

7.6CVSS7.1AI score0.00291EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/25 6:07 p.m.•24 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS0.00154EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/11/25 6:07 p.m.•9 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.5AI score0.00154EPSS
SaveExploits0References3
OSV
OSV
•added 2025/11/25 6:07 p.m.•13 views

CVE-2025-33205

NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution...

7.3CVSS7.3AI score
SaveExploits0References4
CVE
CVE
•added 2025/11/25 6:06 p.m.•47 views

CVE-2025-33204

CVE-2025-33204 affects NVIDIA NeMo Framework (all platforms). The vulnerability lies in the NLP/LLM components, where malicious input data can lead to code injection, with potential outcomes including code execution, privilege escalation, information disclosure, and data tampering. According to R...

7.8CVSS7.3AI score0.00203EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2025/11/25 6:06 p.m.•10 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS7.3AI score0.00203EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/11/25 6:06 p.m.•27 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS0.00203EPSS
SaveExploits0References3
OSV
OSV
•added 2025/11/25 6:06 p.m.•21 views

CVE-2025-33204

NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data...

7.8CVSS7AI score
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•20 views

NVIDIA Nemo Framework 代码注入漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code injection vulnerability exists in NVIDIA Nemo Framework that stems from the presence of malicious data in the NLP and LLM components, which could lead to code injection that could result in co...

7.8CVSS7.2AI score0.00203EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/11/25 12:00 a.m.•17 views

NVIDIA Nemo Framework 安全漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA Corporation. A security vulnerability exists in the NVIDIA Nemo Framework that stems from the presence of function inclusion in predefined variables from an untrusted scope of control, which could lea...

7.3CVSS7.5AI score0.00154EPSS
SaveExploits0References4
Rows per page
Query Builder