Lucene search
+L

406 matches found

CNVD
CNVD
•added 2025/08/21 12:00 a.m.•20 views

NVIDIA NeMo Framework Code Issue Vulnerability

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code issue vulnerability exists in the NVIDIA NeMo Framework, which can be exploited by an attacker to execute malicious code by uploading arbitrary files and bypassing file size limits...

9.8CVSS7.4AI score0.00573EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/21 12:00 a.m.•21 views

NVIDIA NeMo library path traversal vulnerability

NVIDIA NeMo library is a library of deep learning tools from NVIDIA. The NVIDIA NeMo library suffers from a path traversal vulnerability, which originates in the model loading component, that can be exploited by an attacker to obtain sensitive files by accessing locations outside of a restricted...

9.8CVSS6.8AI score0.01054EPSS
SaveExploits0References1
OSV
OSV
•added 2025/08/13 6:15 p.m.•13 views

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

9.8CVSS8.4AI score
SaveExploits0References3
OSV
OSV
•added 2025/08/13 6:15 p.m.•18 views

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

9.8CVSS8.3AI score
SaveExploits0References3
NVD
NVD
•added 2025/08/13 6:15 p.m.•22 views

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

9.8CVSS0.01054EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/08/13 5:16 p.m.•22 views

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

7.8CVSS0.01054EPSS
SaveExploits0References3
Mend
Mend
•added 2025/08/13 5:16 p.m.•3 views

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

9.8CVSS0.01054EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
•added 2025/08/13 5:16 p.m.•17 views

CVE-2025-23304

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

9.8CVSS8.3AI score0.01054EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/08/13 5:15 p.m.•4 views

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

7.8CVSS8.3AI score0.00573EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/08/13 5:15 p.m.•24 views

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

7.8CVSS0.00573EPSS
SaveExploits0References3
Mend
Mend
•added 2025/08/13 5:15 p.m.•4 views

CVE-2025-23303

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

9.8CVSS0.00573EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/13 12:00 a.m.•15 views

NVIDIA NeMo library 路径遍历漏洞

NVIDIA NeMo library is a library of deep learning tools from NVIDIA. The NVIDIA NeMo library suffers from a path traversal vulnerability, which originates in the model loading component, that can be exploited by an attacker to obtain sensitive files by accessing locations outside of a restricted...

9.8CVSS6.7AI score0.01054EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/08/13 12:00 a.m.•17 views

NVIDIA NeMo Framework 代码问题漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A code issue vulnerability exists in the NVIDIA NeMo Framework, which can be exploited by an attacker to execute malicious code by uploading arbitrary files and bypassing file size limits...

9.8CVSS7.3AI score0.00573EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/08/13 12:00 a.m.•23 views

PT-2025-33027

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo Framework affected versions not specified Description: The NVIDIA NeMo Framework contains a flaw that allows a user to cause deserialization of untrusted data, potentially leading to remote code execution and data tampering...

9.8CVSS7.1AI score0.00573EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•9 views

CVE-2025-23303: Deserialization of Untrusted Data

NVIDIA NeMo Framework for all platforms contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering...

9.8CVSS6.5AI score0.00573EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/08/13 12:00 a.m.•23 views

PT-2025-33028

Name of the Vulnerable Software and Affected Versions: NVIDIA NeMo library affected versions not specified Description: The NVIDIA NeMo library contains an issue in the model loading component that allows for code injection by loading maliciously crafted .nemo files. A successful exploit may lead...

9.8CVSS7.7AI score0.01054EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/13 12:00 a.m.•2 views

CVE-2025-23304: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA NeMo library for all platforms contains a vulnerability in the model loading component, where an attacker could cause code injection by loading .nemo files with maliciously crafted metadata. A successful exploit of this vulnerability may lead to remote code execution and data tampering...

9.8CVSS6.3AI score0.01054EPSS
SaveExploits0References1
Nvidia
Nvidia
•added 2025/08/12 12:00 a.m.•38 views

Security Bulletin: NVIDIA NeMo Framework - August 2025

NVIDIA has released a software update for NVIDIA® NeMo Framework. To protect your system, download and install the latest NVIDIA Nemo Framework from NVIDIA GitHub. Go to NVIDIA Product Security...

9.8CVSS7.1AI score0.01054EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/05/23 8:28 a.m.•22 views

CVE-2024-0129

NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering...

7.8CVSS7.4AI score0.00243EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 12:44 a.m.•21 views

CVE-2022-22821

NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available...

4.4CVSS6.8AI score0.003EPSS
SaveExploits0References1
Rows per page
Query Builder