Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-23234 State: PUBLISHED Published: 2025-03-04T03:44:45.499Z Last Updated: 2025-03-11T16:09:56.192Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-120 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-23235 State: PUBLISHED Published: 2025-06-08T11:46:40.229Z Last Updated: 2025-06-09T03:32:19.020Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-125 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause DOS through out-of-bounds read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE ID: CVE-2025-23236 State: PUBLISHED Published: 2025-02-06T07:05:49.056Z Last Updated: 2025-02-12T19:51:10.815Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Humming Heads Inc. Products: Defense Platform Home Edition Problem Types: CWE-120 Description: Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.hummingheads.co.jp/dep/storelist/ - https://jvn.jp/en/jp/JVN66673020/
CVE ID: CVE-2025-23237 State: PUBLISHED Published: 2025-01-22T05:50:14.930Z Last Updated: 2025-02-12T20:41:22.887Z Severity: MEDIUM (CVSS 6.6 CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: I-O DATA DEVICE, INC. Products: UD-LT2 Problem Types: CWE-78 Description: Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If a user logs in to CLI of the affected product, an arbitrary OS command may be executed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iodata.jp/support/information/2025/01_ud-lt2/ - https://jvn.jp/en/jp/JVN15293958/
CVE ID: CVE-2025-23239 State: PUBLISHED Published: 2025-02-05T17:31:03.286Z Last Updated: 2025-02-06T04:55:24.286Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-77 Description: When running in Appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000138757
CVE ID: CVE-2025-23240 State: PUBLISHED Published: 2025-03-04T03:44:46.625Z Last Updated: 2025-03-11T16:09:50.630Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-787 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-23241 State: PUBLISHED Published: 2025-08-12T16:58:44.188Z Last Updated: 2025-08-13T20:18:02.801Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) 800 Series Ethernet Problem Types: Denial of Service, CWE-190 Description: Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE ID: CVE-2025-23242 State: PUBLISHED Published: 2025-03-11T19:42:04.385Z Last Updated: 2025-03-11T19:57:44.693Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: Riva Problem Types: CWE-284 Description: NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, denial of service, or information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5625
CVE ID: CVE-2025-23243 State: PUBLISHED Published: 2025-03-11T19:43:23.276Z Last Updated: 2025-03-11T19:59:43.176Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: NVIDIA Products: Riva Problem Types: CWE-284 Description: NVIDIA Riva contains a vulnerability where a user could cause an improper access control issue. A successful exploit of this vulnerability might lead to data tampering or denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5625
CVE ID: CVE-2025-23244 State: PUBLISHED Published: 2025-05-01T14:04:45.789Z Last Updated: 2025-05-01T14:52:01.740Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GPU Display Driver, vGPU Software, Cloud Gaming Problem Types: CWE-863 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an unprivileged attacker to escalate permissions. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a
ering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5630
CVE ID: CVE-2025-23245 State: PUBLISHED Published: 2025-05-01T13:53:48.765Z Last Updated: 2025-05-01T14:52:22.664Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: vGPU Software, Cloud Gaming Problem Types: CWE-732 Description: NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5630
CVE ID: CVE-2025-23246 State: PUBLISHED Published: 2025-05-01T14:12:30.765Z Last Updated: 2025-05-01T14:51:28.377Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: vGPU Software, Cloud Gaming Problem Types: CWE-400 Description: NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows a guest to consume uncontrolled resources. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5630
CVE ID: CVE-2025-23247 State: PUBLISHED Published: 2025-05-27T16:43:37.229Z Last Updated: 2025-06-02T17:03:58.722Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-130 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary, where a failure to check the length of a buffer could allow a user to cause the tool to crash or execute arbitrary code by passing in a malformed ELF file. A successful exploit of this vulnerability might lead to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidi
code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5643
CVE ID: CVE-2025-23248 State: PUBLISHED Published: 2025-09-24T13:11:00.645Z Last Updated: 2025-09-24T18:43:08.882Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the nvdisasm binary where a user may cause an out-of-bounds read by passing a malformed ELF file to nvdisasm. A successful exploit of this vulnerability may lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23248 - https://www.cve.org/CVERecord?id=CVE-2025-23248 - https://
ferences: - https://nvd.nist.gov/vuln/detail/CVE-2025-23248 - https://www.cve.org/CVERecord?id=CVE-2025-23248 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23249 State: PUBLISHED Published: 2025-04-22T15:30:16.986Z Last Updated: 2025-04-23T15:59:26.415Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L) Vendors: NVIDIA Products: NeMo Framework Problem Types: CWE-502 Description: NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5641
CVE ID: CVE-2025-23250 State: PUBLISHED Published: 2025-04-22T15:35:29.183Z Last Updated: 2025-04-23T15:59:21.175Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L) Vendors: NVIDIA Products: NeMo Framework Problem Types: CWE-22 Description: NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5641
CVE ID: CVE-2025-23251 State: PUBLISHED Published: 2025-04-22T15:42:03.520Z Last Updated: 2025-04-23T15:59:15.583Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L) Vendors: NVIDIA Products: NeMo Framework Problem Types: CWE-94 Description: NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5641
CVE ID: CVE-2025-23252 State: PUBLISHED Published: 2025-06-18T00:17:07.941Z Last Updated: 2025-06-18T13:32:50.723Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: NVDebug tool Problem Types: CWE-1244 Description: The NVIDIA NVDebug tool contains a vulnerability that may allow an actor to gain access to restricted components. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5651
CVE ID: CVE-2025-23253 State: PUBLISHED Published: 2025-04-22T18:45:57.735Z Last Updated: 2025-04-22T18:55:57.135Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA App Problem Types: CWE-547 Description: NVIDIA NvContainer service for Windows contains a vulnerability in its usage of OpenSSL, where an attacker could exploit a hard-coded constant issue by copying a malicious DLL in a hard-coded path. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.cus
ation disclosure, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5644
CVE ID: CVE-2025-23254 State: PUBLISHED Published: 2025-05-01T14:05:50.487Z Last Updated: 2025-05-01T14:51:47.513Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: TensorRT-LLM Problem Types: CWE-502 Description: NVIDIA TensorRT-LLM for any platform contains a vulnerability in python executor where an attacker may cause a data validation issue by local access to the TRTLLM server. A successful exploit of this vulnerability may lead to code execution, information disclosure and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5648
CVE ID: CVE-2025-23255 State: PUBLISHED Published: 2025-09-24T13:11:17.884Z Last Updated: 2025-09-24T18:43:36.041Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA Toolkit for all platforms contains a vulnerability in the cuobjdump binary where a user may cause an out-of-bounds read by passing a malformed ELF file to cuobjdump. A successful exploit of this vulnerability may lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23255 - https://www.cve.org/CVERecord?id=CVE-2025-23255 - https:
References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23255 - https://www.cve.org/CVERecord?id=CVE-2025-23255 - https://nvidia.custhelp.com/app/answers/detail/a_id/5661
CVE ID: CVE-2025-23256 State: PUBLISHED Published: 2025-09-04T15:50:50.490Z Last Updated: 2025-09-04T18:58:08.951Z Severity: HIGH (CVSS 8.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: NVIDIA Products: BlueField GA, BlueField LTS22, BlueField LTS23, BlueField LTS24 Problem Types: CWE-863 Description: NVIDIA BlueField contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
eges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23256 - https://www.cve.org/CVERecord?id=CVE-2025-23256 - https://nvidia.custhelp.com/app/answers/detail/a_id/5655
CVE ID: CVE-2025-23257 State: PUBLISHED Published: 2025-09-04T15:51:16.367Z Last Updated: 2025-09-04T18:58:02.441Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DOCA with collectx-clxapidev Problem Types: CWE-732 Description: NVIDIA DOCA contains a vulnerability in the collectx-clxapidev Debian package that could allow an actor with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23257 - https://www.cve.org/CVERecord?id=CVE-2025-23257 - https://nvidia.custh
https://nvd.nist.gov/vuln/detail/CVE-2025-23257 - https://www.cve.org/CVERecord?id=CVE-2025-23257 - https://nvidia.custhelp.com/app/answers/detail/a_id/5655
CVE ID: CVE-2025-23258 State: PUBLISHED Published: 2025-09-04T15:51:35.681Z Last Updated: 2025-09-04T18:57:55.150Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DOCA with collectx-dpeserver Problem Types: CWE-732 Description: NVIDIA DOCA contains a vulnerability in the collectx-dpeserver Debian package for arm64 that could allow an attacker with low privileges to escalate privileges. A successful exploit of this vulnerability might lead to escalation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23258 - https://www.cve.org/CVERecord?id=CVE-2025-23258 - https:/
eferences: - https://nvd.nist.gov/vuln/detail/CVE-2025-23258 - https://www.cve.org/CVERecord?id=CVE-2025-23258 - https://nvidia.custhelp.com/app/answers/detail/a_id/5655
CVE ID: CVE-2025-23259 State: PUBLISHED Published: 2025-09-04T15:52:05.610Z Last Updated: 2025-09-04T18:57:49.604Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H) Vendors: NVIDIA Products: Mellanox DPDK 22.11, Mellanox DPDK 20.11, Upstream DPDK Problem Types: CWE-362 Description: NVIDIA Mellanox DPDK contains a vulnerability in Poll Mode Driver (PMD), where an attacker on a VM in the system might be able to cause information disclosure and denial of service on the network interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23259 - https://www.cve.org/CVERecord?id=CVE-2025-23259 - https://nvidia.custhel
tps://nvd.nist.gov/vuln/detail/CVE-2025-23259 - https://www.cve.org/CVERecord?id=CVE-2025-23259 - https://nvidia.custhelp.com/app/answers/detail/a_id/5655
CVE ID: CVE-2025-23260 State: PUBLISHED Published: 2025-06-24T17:28:40.319Z Last Updated: 2025-06-24T18:09:56.253Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: NVIDIA Products: AIStore Problem Types: CWE-266 Description: NVIDIA AIStore contains a vulnerability in the AIS Operator where a user may gain elevated k8s cluster access by using the ServiceAccount attached to the ClusterRole. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5660
CVE ID: CVE-2025-23261 State: PUBLISHED Published: 2025-09-04T15:52:20.450Z Last Updated: 2025-09-04T18:57:43.632Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: NVIDIA Products: NVOS, Cumulus Linux Problem Types: CWE-532 Description: NVIDIA Cumulus Linux and NVOS products contain a vulnerability, where hashed user passwords are not properly suppressed in log files, potentially disclosing information to unauthorized users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23261 - https://www.cve.org/CVERecord?id=CVE-2025-23261 - https://nvidia.custhelp.com/app/answers/detail/a_id/5655
CVE ID: CVE-2025-23262 State: PUBLISHED Published: 2025-09-04T15:52:49.201Z Last Updated: 2025-09-04T18:57:38.048Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H) Vendors: NVIDIA Products: ConnectX GA, ConnectX LTS22, ConnectX LTS23, ConnectX LTS24, ConnectX-4, ConnectX-4 LX Problem Types: CWE-863 Description: NVIDIA ConnectX contains a vulnerability in the management interface, where an attacker with local access could cause incorrect authorization to modify the configuration. A successful exploit of this vulnerability might lead to denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichm
ce, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2025-23262 - https://www.cve.org/CVERecord?id=CVE-2025-23262 - https://nvidia.custhelp.com/app/answers/detail/a_id/5655
CVE ID: CVE-2025-23263 State: PUBLISHED Published: 2025-07-17T17:19:50.542Z Last Updated: 2025-07-24T20:08:57.395Z Severity: HIGH (CVSS 7.6 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: NVIDIA Products: DOCA-Host and Mellanox OFED Problem Types: CWE-279 Description: NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5654
CVE ID: CVE-2025-23264 State: PUBLISHED Published: 2025-06-24T15:21:33.274Z Last Updated: 2025-06-24T15:41:10.273Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Megatron LM Problem Types: CWE-94 Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data Tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5663
CVE ID: CVE-2025-23265 State: PUBLISHED Published: 2025-06-24T15:29:08.448Z Last Updated: 2025-06-24T15:42:35.320Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: Megatron LM Problem Types: CWE-94 Description: NVIDIA Megatron-LM for all platforms contains a vulnerability in a python component where an attacker may cause a code injection issue by providing a malicious file. A successful exploit of this vulnerability may lead to Code Execution, Escalation of Privileges, Information Disclosure and Data Tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5663
CVE ID: CVE-2025-23266 State: PUBLISHED Published: 2025-07-17T19:08:21.352Z Last Updated: 2025-08-16T21:33:32.242Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: Container Toolkit Problem Types: CWE-426 Description: NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation of privileges, data tampering, information disclosure, and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https:
and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5659
CVE ID: CVE-2025-23267 State: PUBLISHED Published: 2025-07-17T19:32:36.958Z Last Updated: 2025-11-04T21:09:39.708Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H) Vendors: NVIDIA Products: Container Toolkit Problem Types: CWE-59 Description: NVIDIA Container Toolkit for all platforms contains a vulnerability in the update-ldcache hook, where an attacker could cause a link following by using a specially crafted container image. A successful exploit of this vulnerability might lead to data tampering and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5659
CVE ID: CVE-2025-23268 State: PUBLISHED Published: 2025-09-17T22:02:12.645Z Last Updated: 2025-09-18T13:30:09.455Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: Triton Inference Server Problem Types: CWE-20 Description: NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue. A successful exploit of this vulnerability may lead to code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5691