Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-31583 State: PUBLISHED Published: 2022-07-11T01:02:03 Last Updated: 2024-08-03T07:19:06.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31584 State: PUBLISHED Published: 2022-07-11T01:02:10 Last Updated: 2024-08-03T07:19:06.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31585 State: PUBLISHED Published: 2022-07-11T01:02:18 Last Updated: 2024-08-03T07:19:06.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31586 State: PUBLISHED Published: 2022-07-11T01:02:24 Last Updated: 2024-08-03T07:19:06.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31587 State: PUBLISHED Published: 2022-07-11T01:02:29 Last Updated: 2024-08-03T07:19:06.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31588 State: PUBLISHED Published: 2022-07-11T01:02:37 Last Updated: 2024-08-03T07:19:06.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/github/securitylab/issues/669#issuecomment-1117265726
CVE ID: CVE-2022-31589 State: PUBLISHED Published: 2022-06-14T18:36:39 Last Updated: 2024-08-03T07:19:06.823Z Vendors: SAP SE Products: SAP ERP, localization for CEE countries., SAP Financials, SAP S/4Hana Core Problem Types: CWE-863 Description: Due to improper authorization check, business users who are using Israeli File from SHAAM program (/ATL/VQ23 transaction), are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support
eferences: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3203065
CVE ID: CVE-2022-31590 State: PUBLISHED Published: 2022-06-14T18:39:21 Last Updated: 2024-08-03T07:19:06.821Z Vendors: SAP SE Products: SAP PowerDesigner Proxy 16.7 Problem Types: CWE-428 Description: SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the application during application start up or reboot, potentially compromising Confidentiality, Integrity and Availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://w
ty, Integrity and Availability of the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3197005
CVE ID: CVE-2022-31591 State: PUBLISHED Published: 2022-07-12T20:27:08 Last Updated: 2024-08-03T07:19:06.822Z Vendors: SAP SE Products: SAP BusinessObjects (BW Publisher Service) Problem Types: CWE-428 Description: SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3167430
CVE ID: CVE-2022-31592 State: PUBLISHED Published: 2022-07-12T20:26:34 Last Updated: 2024-08-03T07:19:06.825Z Vendors: SAP SE Products: SAP Enterprise Extension Defense Forces & Public Security (EA-DFPS) Problem Types: CWE-862 Description: The application SAP Enterprise Extension Defense Forces & Public Security - versions 605, 606, 616,617,618, 802, 803, 804, 805, 806, does not perform necessary authorization checks for an authenticated user over the network, resulting in escalation of privileges leading to a limited impact on confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - ht
VE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3196280
CVE ID: CVE-2022-31593 State: PUBLISHED Published: 2022-07-12T20:27:15 Last Updated: 2024-08-03T07:19:06.832Z Vendors: SAP SE Products: SAP Business One Problem Types: CWE-74 Description: SAP Business One client - version 10.0 allows an attacker with low privileges, to inject code that can be executed by the application. An attacker could thereby control the behavior of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3191012
CVE ID: CVE-2022-31594 State: PUBLISHED Published: 2022-06-14T18:44:35 Last Updated: 2024-08-03T07:19:06.843Z Vendors: SAP SE Products: SAP Adaptive Server Enterprise (ASE) Problem Types: CWE-269 Description: A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix system. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3155571
CVE ID: CVE-2022-31595 State: PUBLISHED Published: 2022-06-14T18:45:56 Last Updated: 2024-08-03T07:19:06.842Z Vendors: SAP SE Products: SAP Financial Consolidation Problem Types: CWE-862 Description: SAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3158815
CVE ID: CVE-2022-31596 State: PUBLISHED Published: 2022-12-12T03:43:40.155Z Last Updated: 2025-04-22T17:56:56.877Z Vendors: SAP Products: SAP Business Objects Platform (Monitoring DB) Problem Types: CWE-668 Description: Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - version 430, can access BOE Monitoring database to retrieve and modify (non-personal) system data which would otherwise be restricted. Also, a potential attack could be used to leave the CMS's scope and impact the database. A successful attack could have a low impact on confidentiality
be used to leave the CMS's scope and impact the database. A successful attack could have a low impact on confidentiality, a high impact on integrity, and a low impact on availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://launchpad.support.sap.com/#/notes/3213507 - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
CVE ID: CVE-2022-31597 State: PUBLISHED Published: 2022-07-12T20:27:00 Last Updated: 2024-08-03T07:25:59.513Z Vendors: SAP SE Products: SAP S/4HANA Problem Types: CWE-862 Description: Within SAP S/4HANA - versions S4CORE 101, 102, 103, 104, 105, 106, SAPSCORE 127, the application business partner extension for Spain/Slovakia does not perform necessary authorization checks for a low privileged authenticated user over the network, resulting in escalation of privileges leading to low impact on confidentiality and integrity of the data. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launch
ontainer: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3213826
CVE ID: CVE-2022-31598 State: PUBLISHED Published: 2022-07-12T20:26:25 Last Updated: 2024-08-03T07:25:59.514Z Vendors: SAP SE Products: SAP Business Objects Problem Types: CWE-345 Description: Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application. Additional Analyst Notes: - CVE Program Container: References: - https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/32
//www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - https://launchpad.support.sap.com/#/notes/3213279
CVE ID: CVE-2022-31599 State: PUBLISHED Published: 2022-07-04T18:10:14 Last Updated: 2024-08-03T07:26:00.938Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX A100 Problem Types: CWE-824 Description: NVIDIA DGX A100 contains a vulnerability in SBIOS in the Ofbd, where a local user with elevated privileges can cause access to an uninitialized pointer, which may lead to code execution, escalation of privileges, denial of service, and information disclosure. The scope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5367
CVE ID: CVE-2022-31600 State: PUBLISHED Published: 2022-07-04T18:10:19 Last Updated: 2024-08-03T07:26:01.049Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX A100 Problem Types: CWE-190 Description: NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmmCore, where a user with high privileges can chain another vulnerability to this vulnerability, causing an integer overflow, possibly leading to code execution, escalation of privileges, denial of service, compromised integrity, and information disclosure. The scope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://
cope of impact can extend to other components. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5367
CVE ID: CVE-2022-31601 State: PUBLISHED Published: 2022-07-04T18:10:27 Last Updated: 2024-08-03T07:26:00.904Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX A100 Problem Types: CWE-787 Description: NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmbiosPei, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5367
CVE ID: CVE-2022-31602 State: PUBLISHED Published: 2022-07-04T18:10:31 Last Updated: 2024-08-03T07:25:59.511Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX A100 Problem Types: CWE-787 Description: NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with elevated privileges and a preconditioned heap can exploit an out-of-bounds write vulnerability, which may lead to code execution, denial of service, data integrity impact, and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5367
CVE ID: CVE-2022-31603 State: PUBLISHED Published: 2022-07-04T18:10:36 Last Updated: 2024-08-03T07:26:00.938Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA DGX A100 Problem Types: CWE-129 Description: NVIDIA DGX A100 contains a vulnerability in SBIOS in the IpSecDxe, where a user with high privileges and preconditioned IpSecDxe global data can exploit improper validation of an array index to cause code execution, which may lead to denial of service, data integrity impact, and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5367
CVE ID: CVE-2022-31604 State: PUBLISHED Published: 2022-07-01T17:15:21 Last Updated: 2024-08-03T07:26:00.997Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA FLARE Problem Types: CWE-502 Description: NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/
both Confidentiality and Integrity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-rcxc-3w2m-mp8h
CVE ID: CVE-2022-31605 State: PUBLISHED Published: 2022-07-01T17:15:22 Last Updated: 2024-08-03T07:26:00.993Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA FLARE Problem Types: CWE-502 Description: NVFLARE, versions prior to 2.1.2, contains a vulnerability in its utils module, where YAML files are loaded via yaml.load() instead of yaml.safe_load(). The deserialization of Untrusted Data, may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NVIDIA/NVFlare/secur
and Integrity. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-hrf3-622q-8366
CVE ID: CVE-2022-31606 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:35:23.192Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Cloud Gaming (guest driver) Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a failure to properly validate data might allow an attacker with basic user capabilities to cause an out-of-bounds access in kernel mode, which could lead to denial of service, information disclosure, escalation of privileges, or data tampering. Additional Analyst Notes: - CVE Pro
ial of service, information disclosure, escalation of privileges, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31607 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:34:43.257Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Cloud Gaming (guest driver), NVIDIA Cloud Gaming (Virtual GPU Manager) Problem Types: CWE-20 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer (nvidia.ko), where a local user with basic capabilities can cause improper input validation, which may lead to denial of service, escalation of privileges, data tampering, and limited information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Refer
g, and limited information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-31608 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T13:36:30.099Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: GeForce, Workstation, Compute Problem Types: CWE-281 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in an optional D-Bus configuration file, where a local user with basic capabilities can impact protected D-Bus endpoints, which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.co
ng. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2022-31609 State: PUBLISHED Published: 2022-08-05T20:30:19 Last Updated: 2024-08-03T07:26:01.107Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming Problem Types: CWE-285 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where it allows the guest VM to allocate resources for which the guest is not authorized. This vulnerability may lead to loss of data integrity and confidentiality, denial of service, or information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/d
n disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31610 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:33:34.082Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Cloud Gaming (guest driver) Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys), where a local user with basic capabilities can cause an out-of-bounds write, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.
ring. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31611 State: PUBLISHED Published: 2023-02-07T02:22:19.812Z Last Updated: 2025-03-25T15:26:42.794Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:H) Vendors: NVIDIA Products: GeForce Experience Problem Types: CWE-427 Description: NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to escalation of privileges and code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:
ges and code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5384
CVE ID: CVE-2022-31612 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:30:45.925Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: NVIDIA Products: NVIDIA Cloud Gaming (guest driver) Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where a local user with basic capabilities can cause an out-of-bounds read, which may lead to a system crash or a leak of internal kernel information. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31613 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:29:39.165Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA Cloud Gaming (guest driver) Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where any local user can cause a null-pointer dereference, which may lead to a kernel panic. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31614 State: PUBLISHED Published: 2022-08-05T20:30:33 Last Updated: 2024-08-03T07:26:01.102Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA Virtual GPU Software and NVIDIA Cloud Gaming Problem Types: CWE-415 Description: NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it may double-free some resources. An attacker may exploit this vulnerability with other vulnerabilities to cause denial of service, code execution, and information disclosure. Additional Analyst Notes: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383
CVE ID: CVE-2022-31615 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:28:18.412Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: GeForce, Workstation, Compute Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a local user with basic capabilities can cause a null-pointer dereference, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5383 - https://security.gentoo.org/glsa/202310-02