Lucene search
+L

6998 matches found

CNNVD
CNNVD
added 2024/10/03 12:00 a.m.20 views

NVIDIA CUDA toolkit 资源管理错误漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A resource management error vulnerability exists in the NVIDIA CUDA toolkit. An attacker could exploit this vulnerability by running nvdisasm on...

3.3CVSS6.6AI score0.00201EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/10/03 12:00 a.m.20 views

NVIDIA CUDA toolkit 代码问题漏洞

The NVIDIA CUDA toolkit is a toolkit from NVIDIA, Inc. It provides a development environment for creating high-performance GPU-accelerated applications. A code issue vulnerability exists in the NVIDIA CUDA toolkit that originates from a null pointer dereference, which can lead to a denial of...

3.3CVSS6.8AI score0.00201EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2024/10/03 12:00 a.m.6 views

PT-2024-15353 · Nvidia +1 · Nvidia Cuda Toolkit +1

Name of the Vulnerable Software and Affected Versions: NVIDIA CUDA toolkit for Windows and Linux affected versions not specified Description: The NVIDIA CUDA toolkit contains a security issue in the nvdisasm command line tool. An attacker may cause an improper validation in input issue by trickin...

3.3CVSS6.7AI score0.00205EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2024/10/03 12:00 a.m.29 views

NVIDIA Container Toolkit < 1.16.2 Multiple Vulnerabilities

The version of NVIDIA Container Toolkit installed on the remote host is prior to 1.16.2. It is, therefore, affected by multiple vulnerabilities as referenced in the September 2024 Security Bulletin. - NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU...

9CVSS7.3AI score0.38673EPSS
SaveExploits2References3
Snyk
Snyk
added 2024/10/02 12:28 p.m.5 views

Malicious Package

Overview agoda-design-toolkit-2 is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection betwee...

9.8CVSS7AI score
SaveExploits0References2
Snyk
Snyk
added 2024/10/02 12:28 p.m.5 views

Malicious Package

Overview agoda-design-toolkit-2 is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection betwee...

9.8CVSS7AI score
SaveExploits0References2
Nvidia
Nvidia
added 2024/10/02 12:00 a.m.31 views

Security Bulletin: NVIDIA CUDA Toolkit - October 2024

NVIDIA has released a software update for NVIDIA® CUDA® Toolkit. To protect your system, download and install this software update from the CUDA Toolkit Downloads page. Go to NVIDIA Product Security. Details This section provides a summary of potential vulnerabilities that this security update...

3.3CVSS7AI score0.00205EPSS
SaveExploits0
OSV
OSV
added 2024/10/01 6:10 a.m.8 views

MAL-2024-9063 Malicious code in wagmi-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb332a8b9dc641c801bad64051affb8de94c8052e6048aa615f734c0fa9cc6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/01 6:10 a.m.6 views

Malicious code in wagmi-toolkit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4eb332a8b9dc641c801bad64051affb8de94c8052e6048aa615f734c0fa9cc6a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/09/30 2:31 p.m.40 views

RLSA-2024:6783 Moderate: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: Possible denial of service in X.509 name checks CVE-2024-6119 For more details about the security...

7.5CVSS7AI score0.66582EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/30 2:30 p.m.14 views

RLSA-2024:6963 Moderate: gtk3 security update

The GTK+ library provides a multi-platform toolkit for creating graphical user interfaces. The gtk3 packages contain GTK+ version 3. Security Fixes: gtk3: gtk2: Library injection from CWD CVE-2024-6655 For more details about the security issues, including the impact, a CVSS score, acknowledgments...

7CVSS7.4AI score0.00464EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2024/09/30 12:00 a.m.15 views

WordPress The Ultimate WordPress Toolkit – WP Extended Plugin <= 3.0.8 is vulnerable to Cross Site Scripting (XSS)

Software The Ultimate WordPress Toolkit – WP Extended Type Plugin Vulnerable versions = 3.0.8 Fixed in 3.0.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47386 Patch priority Medium CVSS severity Medium 7.1 Developer WP Extended PSID ed865076cee2 Credits Le Ngoc...

7.1CVSS7.1AI score0.00304EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
added 2024/09/28 3:17 a.m.4 views

SUSE CVE-2024-0132

NVIDIA Container Toolkit 1.16.1 or earlier contains a Time-of-check Time-of-Use TOCTOU vulnerability when used with default configuration where a specifically crafted container image may gain access to the host file system. This does not impact use cases where CDI is used. A successful exploit of...

8.3CVSS7.3AI score0.38673EPSS
SaveExploits2References8
SUSE CVE
SUSE CVE
added 2024/09/28 3:17 a.m.8 views

SUSE CVE-2024-0133

NVIDIA Container Toolkit 1.16.1 or earlier contains a vulnerability in the default mode of operation allowing a specially crafted container image to create empty files on the host file system. This does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead to...

4.7CVSS6.8AI score0.00235EPSS
SaveExploits0References8
The Hacker News
The Hacker News
added 2024/09/27 5:54 a.m.25 views

Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers

A critical security flaw has been disclosed in the NVIDIA Container Toolkit that, if successfully exploited, could allow threat actors to break out of the confines of a container and gain full access to the underlying host. The vulnerability, tracked as CVE-2024-0132, carries a CVSS score of 9.0...

9CVSS8.6AI score0.38673EPSS
SaveExploits2
Trend Micro Simply Security
Trend Micro Simply Security
added 2024/09/27 12:00 a.m.6 views

First to Detect AI Threats, Including NVIDIA-powered Systems

On Wednesday, NVIDA released updates to fix a critical vulnerability in its NVIDIA Container Toolkit, which, if exploited, could put a wide range of AI infrastructure and underlying data/secrets at risk...

7.2AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2024/09/27 12:00 a.m.11 views

Trend Detects NVIDIA AI Toolkit Vulnerability

On Wednesday, NVIDIA released updates to fix a critical vulnerability in its NVIDIA Container Toolkit, which, if exploited, could put a wide range of AI infrastructure and underlying data/secrets at risk...

7.2AI score
SaveExploits0
Trend Micro Simply Security
Trend Micro Simply Security
added 2024/09/27 12:00 a.m.6 views

Delivering Proactive Protection Against Critical Threats to NVIDIA-powered AI Systems

On Wednesday, NVIDA released updates to fix a critical vulnerability in its NVIDIA Container Toolkit, which, if exploited, could put a wide range of AI infrastructure and underlying data/secrets at risk...

7.2AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2024/09/26 7:39 a.m.21 views

CVE-2024-0132

A flaw was found in the NVIDIA Container Toolkit. Affected versions contain a Time-of-check Time-of-Use TOCTOU vulnerability when used with the default configuration, where a specifically crafted container image may gain access to the host file system. This issue does not impact use cases where C...

8.3CVSS7.3AI score0.38673EPSS
SaveExploits2References4
RedhatCVE
RedhatCVE
added 2024/09/26 7:08 a.m.26 views

CVE-2024-0133

A flaw was found in the in the default mode of operation in the NVIDIA Container Toolkit. This flaw allows a specially crafted container image to create empty files on the host file system. This issue does not impact use cases where CDI is used. A successful exploit of this vulnerability may lead...

3.4CVSS6.6AI score0.00235EPSS
SaveExploits0References4
Rows per page
Query Builder