The vulnerability of the UEFI microprogramming software in embedded platforms for artificial intelligence from NVIDIA, the Jetson Orin Series and Jetson Xavier Series, allows a hacker to trigger a system failure.

The vulnerability of the UEFI microprogramming system in embedded platforms for artificial intelligence, such as NVIDIA Jetson Orin Series and NVIDIA Jetson Xavier Series, is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to cause service...

EUVD-2017-7365

Malware in sbrugna...

EUVD-2019-5475

Malware in sbrugna...

EUVD-2025-26056

Malicious code in bioql PyPI...

EUVD-2021-6577

Malicious code in bioql PyPI...

CVE-2025-48109

Cross-Site Request Forgery CSRF vulnerability in Xavier Media XM-Backup xm-backup allows Stored XSS.This issue affects XM-Backup: from n/a through = 0.9.1...

CVE-2025-48109

Cross-Site Request Forgery CSRF vulnerability in Xavier Media XM-Backup xm-backup allows Stored XSS.This issue affects XM-Backup: from n/a through = 0.9.1...

CVE-2025-48109 WordPress XM-Backup plugin <= 0.9.1 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Xavier Media XM-Backup allows Stored XSS. This issue affects XM-Backup: from n/a through 0.9.1...

CVE-2025-48109

CVE-2025-48109 is a CSRF to Stored XSS vulnerability in the WordPress plugin XM-Backup, affecting versions up to and including 0.9.1. The vulnerability allows an attacker to coerce a logged-in user to perform actions that trigger a stored XSS payload, per the CVE description and Patchstack/PT-202...

CVE-2025-48109: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Xavier Media XM-Backup xm-backup allows Stored XSS.This issue affects XM-Backup: from n/a through = 0.9.1...

PT-2025-34991

Name of the Vulnerable Software and Affected Versions: Xavier Media XM-Backup versions through 0.9.1 Description: A Cross-Site Request Forgery CSRF vulnerability exists in Xavier Media XM-Backup, which also allows Stored Cross-Site Scripting XSS. Recommendations: Update Xavier Media XM-Backup to ...

The vulnerability of the UEFI Management mode of the microprogramming software in embedded platforms for artificial intelligence NVIDIA Jetson Orin Series, NVIDIA Xavier Series, and IGX Orin allows a perpetrator to execute arbitrary code, gain unauthorized access to read and modify protected information, or cause system failures.

The vulnerability of the UEFI Management mode of microprogramming software in embedded platforms for artificial intelligence, such as NVIDIA Jetson Orin Series, NVIDIA Xavier Series, and IGX Orin, is related to the improper generation of fault reports. Exploiting this vulnerability can allow...

Security Bulletin: NVIDIA Jetson Orin, IGX Orin and Xavier Devices - July 2025

NVIDIA has released a software update for NVIDIA® Jetson Linux To protect your system, download and install this software update from the Jetson Download Center page, Jetson Linux 35.6.2 Link, Jetson Linux 36.4.4 Link and IGX Link. Go to NVIDIA Product Security...

A Retrospective on DISPEED -- Leveraging Heterogeneity in a Drone Swarm for IDS Execution

Swarms of drones are gaining more and more autonomy and efficiency during their missions. However, security threats can disrupt their missions' progression. To overcome this problem, Network Intrusion Detection Systems NIDS are promising solutions to detect malicious behavior on network traffic...

CVE-2021-1071

NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data, which may lead...

CVE-2021-1110

NVIDIA Linux kernel distributions on Jetson Xavier contain a vulnerability in camera firmware where a user can change input data after validation, which may lead to complete denial of service and serious data corruption of all kernel components...

CVE-2019-14228

Xavier PHP Management Panel 3.0 is vulnerable to Reflected POST-based XSS via the username parameter when registering a new user at admin/includes/adminprocess.php. If there is an error when registering the user, the unsanitized username will reflect via the error page. Due to the lack of CSRF...

CVE-2017-15949

Xavier PHP Management Panel 2.4 allows SQL injection via the usertoedit parameter to admin/adminuseredit.php or the logid parameter to admin/editgroup.php...

WordPress Download Manager plugin < 3.3.00 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Miguel Xavier Penha Neto in WordPress Plugin Download Manager versions 3.3.00...

NVIDIA Jetson 安全漏洞

NVIDIA Jetson is an embedded system development module from NVIDIA. A security vulnerability exists in NVIDIA Jetson that stems from an incorrectly handled path in the GPU MMU mapping code that fails to clean up failed mapping attempts, resulting in denial of service, code execution, and elevatio...