Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-30996 State: PUBLISHED Published: 2024-02-24T15:35:48.371Z Last Updated: 2025-02-13T16:49:41.260Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: IBM Products: Cognos Analytics Problem Types: CWE-346 Description: IBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7123154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254290 - https://security.netapp.com/adv
pport/pages/node/7123154 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254290 - https://security.netapp.com/advisory/ntap-20240405-0004/ - https://security.netapp.com/advisory/ntap-20240621-0006/
CVE ID: CVE-2023-30997 State: PUBLISHED Published: 2024-06-27T18:21:12.373Z Last Updated: 2025-11-03T21:48:09.314Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Access Manager Docker Problem Types: CWE-250 Description: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254638. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254638
CVE ID: CVE-2023-30998 State: PUBLISHED Published: 2024-06-27T18:18:22.101Z Last Updated: 2025-11-03T21:48:10.776Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Access Manager Docker Problem Types: CWE-250 Description: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254649. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7158790 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254649
CVE ID: CVE-2023-30999 State: PUBLISHED Published: 2024-02-03T00:31:31.771Z Last Updated: 2025-11-03T21:48:12.219Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-400 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 254651. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm
ce ID: 254651. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254651
CVE ID: CVE-2023-31001 State: PUBLISHED Published: 2024-01-11T02:44:33.092Z Last Updated: 2025-11-03T21:48:13.695Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-257 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254653. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/n
ional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254653
CVE ID: CVE-2023-31002 State: PUBLISHED Published: 2024-02-07T16:13:14.870Z Last Updated: 2025-11-03T21:48:15.174Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: 256 Plaintext Storage of a Password Description: IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254657. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnera
m Container: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254657
CVE ID: CVE-2023-31003 State: PUBLISHED Published: 2024-01-11T02:22:44.925Z Last Updated: 2025-11-03T21:48:16.634Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-59 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106586 -
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254658
CVE ID: CVE-2023-31004 State: PUBLISHED Published: 2024-02-03T01:03:35.459Z Last Updated: 2025-11-03T21:48:18.097Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-300 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote attacker to gain access to the underlying system using man in the middle techniques. IBM X-Force ID: 254765. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http
. IBM X-Force ID: 254765. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254765
CVE ID: CVE-2023-31005 State: PUBLISHED Published: 2024-02-03T00:17:52.461Z Last Updated: 2025-11-03T21:48:19.679Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-269 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a local user to escalate their privileges due to an improper security configuration. IBM X-Force ID: 254767. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
-Force ID: 254767. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254767
CVE ID: CVE-2023-31006 State: PUBLISHED Published: 2024-02-03T01:05:14.622Z Last Updated: 2025-11-03T21:48:21.144Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Security Verify Access Appliance, Security Verify Access Docker Problem Types: CWE-400 Description: IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to a denial of service attacks on the DSC server. IBM X-Force ID: 254776. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/71065
lyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7106586 - https://exchange.xforce.ibmcloud.com/vulnerabilities/254776
CVE ID: CVE-2023-31007 State: PUBLISHED Published: 2023-07-12T09:07:03.227Z Last Updated: 2024-10-08T13:35:57.720Z Severity: NONE (CVSS N/A CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:N) Vendors: Apache Software Foundation Products: Apache Pulsar Problem Types: CWE-287 Description: Improper Authentication vulnerability in Apache Software Foundation Apache Pulsar Broker allows a client to stay connected to a broker after authentication data expires if the client connected through the Pulsar Proxy when the broker is configured with authenticateOriginalAuthData=false or if a client connects directly to a broker with a specially crafted connect command when the broker is configured with authentic
ient connects directly to a broker with a specially crafted connect command when the broker is configured with authenticateOriginalAuthData=false. This issue affects Apache Pulsar: through 2.9.4, from 2.10.0 through 2.10.3, 2.11.0. 2.9 Pulsar Broker users should upgrade to at least 2.9.5. 2.10 Pulsar Broker users should upgrade to at least 2.10.4. 2.11 Pulsar Broker users should upgrade to at least 2.11.1. 3.0 Pulsar Broker users are unaffected. Any users running the Pulsar Broker for 2.8.* and earlier should upgrade to one of the above patched versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/qxn99xxyp0zv6jchj
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lists.apache.org/thread/qxn99xxyp0zv6jchjggn3soyo5gvqfxj
CVE ID: CVE-2023-31008 State: PUBLISHED Published: 2023-09-20T00:55:51.353Z Last Updated: 2024-09-24T15:26:00.674Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of services, escalation of privileges, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-31009 State: PUBLISHED Published: 2023-09-20T00:56:53.278Z Last Updated: 2024-09-24T15:25:51.588Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-31010 State: PUBLISHED Published: 2023-09-20T01:02:23.410Z Last Updated: 2024-09-24T15:52:26.612Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-31011 State: PUBLISHED Published: 2023-09-20T01:03:34.483Z Last Updated: 2024-09-24T15:25:38.984Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-31012 State: PUBLISHED Published: 2023-09-20T01:05:52.001Z Last Updated: 2024-09-24T15:52:11.910Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in the REST service where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-31013 State: PUBLISHED Published: 2023-09-20T01:06:36.824Z Last Updated: 2024-09-24T15:50:27.487Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-20 Description: NVIDIA DGX H100 BMC contains a vulnerability in the REST service, where an attacker may cause improper input validation. A successful exploit of this vulnerability may lead to escalation of privileges and information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-31014 State: PUBLISHED Published: 2023-09-20T01:13:46.226Z Last Updated: 2024-09-24T18:08:55.964Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L) Vendors: NVIDIA Products: GeForce NOW for Android mobile and TV app Problem Types: CWE-927 Description: NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial of service, and code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Ref
, denial of service, and code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5476
CVE ID: CVE-2023-31015 State: PUBLISHED Published: 2023-09-20T01:12:02.303Z Last Updated: 2024-09-24T15:22:37.297Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L) Vendors: NVIDIA Products: DGX H100 BMC Problem Types: CWE-287 Description: NVIDIA DGX H100 BMC contains a vulnerability in the REST service where a host user may cause as improper authentication issue. A successful exploit of this vulnerability may lead to escalation of privileges, information disclosure, code execution, and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5473
CVE ID: CVE-2023-31016 State: PUBLISHED Published: 2023-11-02T18:36:43.382Z Last Updated: 2024-09-06T19:36:51.162Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: nvidia Products: NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver Problem Types: CWE-427 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability where an uncontrolled search path element may allow an attacker to execute arbitrary code, which may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhel
pering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31017 State: PUBLISHED Published: 2023-11-02T18:56:19.822Z Last Updated: 2024-09-12T13:34:13.884Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver Problem Types: CWE-552 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability where an attacker may be able to write arbitrary data to privileged locations by using reparse points. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
f privileges, information disclosure, or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31018 State: PUBLISHED Published: 2023-11-02T18:56:20.305Z Last Updated: 2025-02-27T20:35:37.083Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: nvidia Products: vGPU driver and Cloud gaming driver Problem Types: CWE-476 Description: NVIDIA GPU Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause a NULL-pointer dereference, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31019 State: PUBLISHED Published: 2023-11-02T18:56:20.769Z Last Updated: 2024-09-12T13:33:16.067Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver Problem Types: CWE-284 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in wksServicePlugin.dll, where the driver implementation does not restrict or incorrectly restricts access from the named pipe server to a connecting client, which may lead to potential impersonation to the client's secure context. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - htt
e client's secure context. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31020 State: PUBLISHED Published: 2023-11-02T18:56:21.202Z Last Updated: 2024-09-05T14:38:25.686Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: nvidia Products: NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver Problem Types: CWE-284 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an unprivileged regular user can cause improper access control, which may lead to denial of service or data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31021 State: PUBLISHED Published: 2023-11-02T18:56:21.642Z Last Updated: 2024-09-05T14:35:22.243Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: nvidia Products: vGPU driver and Cloud gaming driver Problem Types: CWE-476 Description: NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a malicious user in the guest VM can cause a NULL-pointer dereference, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31022 State: PUBLISHED Published: 2023-11-02T18:56:22.082Z Last Updated: 2025-02-27T20:35:31.578Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: nvidia Products: NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a NULL-pointer dereference may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31023 State: PUBLISHED Published: 2023-11-02T18:56:22.518Z Last Updated: 2024-09-05T14:35:02.376Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: nvidia Products: NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver Problem Types: CWE-822 Description: NVIDIA Display Driver for Windows contains a vulnerability where an attacker may cause a pointer dereference of an untrusted value, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31024 State: PUBLISHED Published: 2024-01-12T18:31:35.602Z Last Updated: 2025-06-03T14:04:25.390Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: nvidia Products: DGX A100 Problem Types: CWE-121 Description: NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp
ering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5510
CVE ID: CVE-2023-31025 State: PUBLISHED Published: 2024-01-12T18:31:42.575Z Last Updated: 2025-06-17T21:09:16.946Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: nvidia Products: DGX A100 Problem Types: CWE-90 Description: NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5510
CVE ID: CVE-2023-31026 State: PUBLISHED Published: 2023-11-02T18:56:22.940Z Last Updated: 2024-09-05T14:34:42.757Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: nvidia Products: vGPU driver and Cloud gaming driver Problem Types: CWE-476 Description: NVIDIA vGPU software for Windows and Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a NULL-pointer dereference may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491
CVE ID: CVE-2023-31027 State: PUBLISHED Published: 2023-11-02T18:56:23.410Z Last Updated: 2024-09-12T13:30:01.870Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: nvidia Products: NVIDIA GPU Display driver, vGPU driver, and Cloud gaming driver Problem Types: CWE-427 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability that allows Windows users with low levels of privilege to escalate privileges when an administrator is updating GPU drivers, which may lead to escalation of privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5491