Lucene search
+L

12945 matches found

Prion
Prion
•added 2023/08/03 5:15 p.m.•28 views

Design/Logic Flaw

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

5CVSS5AI score0.00356EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/08/03 4:34 p.m.•13 views

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

4CVSS6.7AI score0.00356EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/03 4:34 p.m.•95 views

CVE-2023-25524

CVE-2023-25524 affects NVIDIA Omniverse Workstation Launcher (Windows/Linux). The vulnerability is in the authentication flow where a user’s access token is displayed in the browser address bar, enabling an attacker to impersonate the user and access launcher resources, with information disclosur...

5.3CVSS5.1AI score0.00356EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/03 4:34 p.m.•39 views

CVE-2023-25524

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

4CVSS5.5AI score0.00356EPSS
SaveExploits0References1
Nvidia
Nvidia
•added 2023/08/03 12:00 a.m.•35 views

Security Bulletin: NVIDIA Omniverse Launcher - August 2023

NVIDIA has released a software update for the Omniverse Workstation Launcher to address a security issue that may lead to information disclosure. To protect your system, download and apply the update for the Omniverse platform that you are using. If you are using the licensed NVIDIA Omniverse...

5.3CVSS5AI score0.00356EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2023/08/03 12:00 a.m.•11 views

NVIDIA Omniverse Workstation Launcher Security Vulnerability

NVIDIA Omniverse Launcher is an easily extensible open platform from NVIDIA. Built for virtual collaboration and real-time physically accurate simulations. A security vulnerability exists in the NVIDIA Omniverse Workstation Launcher, which stems from a security issue in the authentication process...

5.3CVSS6.9AI score0.00356EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/03 12:00 a.m.•1 views

CVE-2023-25524: Use of GET Request Method With Sensitive Query Strings

NVIDIA Omniverse Workstation Launcher for Windows and Linux contains a vulnerability in the authentication flow, where a user’s access token is displayed in the browser user's address bar. An attacker could use this token to impersonate the user to access launcher resources. A successful exploit ...

5.3CVSS5.9AI score0.00356EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/08/03 12:00 a.m.•12 views

PT-2023-6515 · Nvidia · Nvidia Omniverse Workstation Launcher

Name of the Vulnerable Software and Affected Versions: NVIDIA Omniverse Workstation Launcher for Windows and Linux affected versions not specified Description: The issue is related to the authentication flow in the NVIDIA Omniverse Workstation Launcher, where a user's access token is visible in t...

5.3CVSS5.1AI score0.00356EPSS
SaveExploits0References6
HackRead
HackRead
•added 2023/07/14 9:46 p.m.•28 views

Teenagers Face Trial for Hacking BT, Nvidia, Rockstar Games, Revolut, Uber

By Waqas Both teenagers, who are on trial in the United Kingdom, have been accused of being associated with the infamous Lapsus$ hacking group. This is a post from HackRead.com Read the original post: Teenagers Face Trial for Hacking BT, Nvidia, Rockstar Games, Revolut, Uber...

7.1AI score
SaveExploits0
Lenovo
Lenovo
•added 2023/07/11 2:38 p.m.•13 views

NVIDIA Display Driver Advisory - June 2023 - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/07/07 12:00 a.m.•47 views

NVIDIA DGX A100/A800 System BIOS < 1.21 Multiple Vulnerabilities

The system BIOS on the remote NVIDIA DGX A100 or A800 system is prior to 1.21. It is, therefore, affected by the following vulnerabilities: - Improper validation of an input parameter can lead to code execution, escalation of privileges, denial of service, information disclosure and data tamperin...

7.8CVSS7.5AI score0.00174EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/07/06 12:00 a.m.•35 views

NVIDIA CUDA Toolkit < 12.2 DoS

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.2. It is, therefore affected by a denial of service vulnerability due to a NULL pointer deference in the nvdiasm binary file when parsing a malformed ELF file. Note that Nessus has not tested for this issue but has...

3.3CVSS5AI score0.00228EPSS
SaveExploits0References2
NVD
NVD
•added 2023/07/04 12:15 a.m.•30 views

CVE-2023-25517

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering...

7.1CVSS6.6AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
•added 2023/07/04 12:15 a.m.•14 views

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

7.8CVSS5.9AI score0.00148EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/04 12:15 a.m.•33 views

CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

7.8CVSS7.4AI score0.00174EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/04 12:15 a.m.•31 views

CVE-2023-25516

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

7.1CVSS6.6AI score0.00228EPSS
SaveExploits0References1
NVD
NVD
•added 2023/07/04 12:15 a.m.•41 views

CVE-2023-25521

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause execution with unnecessary privileges by leveraging a weakness whereby proper input parameter validation is not performed. A successful exploit of this vulnerability may lead to denial of service, information...

7.8CVSS7.5AI score0.00148EPSS
SaveExploits0References1
OSV
OSV
•added 2023/07/04 12:15 a.m.•13 views

CVE-2023-25517

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager vGPU plugin, where a guest OS may be able to control resources for which it is not authorized, which may lead to information disclosure and data tampering...

7.1CVSS5.8AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
•added 2023/07/04 12:15 a.m.•11 views

CVE-2023-25516

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where an unprivileged user can cause an integer overflow, which may lead to information disclosure and denial of service...

7.1CVSS6.3AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/04 12:15 a.m.•14 views

CVE-2023-25522

NVIDIA DGX A100/A800 contains a vulnerability in SBIOS where an attacker may cause improper input validation by providing configuration information in an unexpected format. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering...

7.8CVSS5.8AI score0.00174EPSS
SaveExploits0References1
Rows per page
Query Builder