Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
lnrichment: References: - https://access.redhat.com/security/cve/CVE-2023-0160 - https://bugzilla.redhat.com/show_bug.cgi?id=2159764 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ed17aa92dc56 - https://lore.kernel.org/all/CABcoxUayum5oOqFMMqAeWuS8+EzojquSOSyDA3J_2omY=2EeAg@mail.gmail.com/
CVE ID: CVE-2023-0161 State: REJECTED Published: N/A Last Updated: 2023-01-11T00:00:00 Description: No description available.
CVE ID: CVE-2023-0162 State: PUBLISHED Published: 2023-01-10T17:14:45.568Z Last Updated: 2025-01-13T17:12:40.156Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: wpchill Products: CPO Companion Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The CPO Companion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its content type settings parameters in versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitr
ng. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9195ac7e-2995-44d0-b5c6-8ffb47395f24 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2844012%40cpo-companion%2Ftrunk&old=2574013%40cpo-companion%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2023-0163 State: PUBLISHED Published: 2024-11-26T11:36:26.574Z Last Updated: 2024-11-27T16:02:29.836Z Vendors: Mozilla Products: Convict Problem Types: CWE-1321 Description: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Mozilla Convict. This allows an attacker to inject attributes that are used in other components, or to override existing attributes with ones that have incompatible type, which may lead to a crash. The main use case of Convict is for handling server-side configurations written by the admins owning the servers, and not random users. So it's unlikely that an admin would deliberately sabotage their own serv
mins owning the servers, and not random users. So it's unlikely that an admin would deliberately sabotage their own server. Still, a situation can happen where an admin not knowledgeable about JavaScript could be tricked by an attacker into writing the malicious JavaScript code into some config files. This issue affects Convict: before 6.2.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mozilla/node-convict/issues/410 - https://github.com/mozilla/node-convict/security/advisories/GHSA-4jrm-c32x-w4jf
CVE ID: CVE-2023-0164 State: PUBLISHED Published: 2023-01-18T00:00:00.000Z Last Updated: 2025-04-03T19:29:49.136Z Vendors: n/a Products: OrangeScrum Problem Types: OS Command Injection Description: OrangeScrum version 2.0.11 allows an authenticated external attacker to execute arbitrary commands on the server. This is possible because the application injects an attacker-controlled parameter into a system function. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/queen/ - https://github.com/Orangescrum/orangescrum
CVE ID: CVE-2023-0165 State: PUBLISHED Published: 2023-03-06T13:34:00.378Z Last Updated: 2025-03-06T15:10:28.489Z Vendors: Unknown Products: Cost Calculator Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Cost Calculator WordPress plugin through 1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f00b82f7-d8ad-4f6b-b791-81cc16b6336b
CVE ID: CVE-2023-0166 State: PUBLISHED Published: 2023-02-13T14:32:20.615Z Last Updated: 2025-03-21T15:25:48.252Z Vendors: Unknown Products: Product Slider for WooCommerce by PickPlugins Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f5d
onal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f5d43062-4ef3-4dd1-b916-0127f0016f5c
CVE ID: CVE-2023-0167 State: PUBLISHED Published: 2023-03-20T15:52:17.698Z Last Updated: 2025-02-26T19:04:20.927Z Vendors: Unknown Products: GetResponse for WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The GetResponse for WordPress plugin through 5.5.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/fafbf666-b908-48ef-9041-fea653e9bfeb
CVE ID: CVE-2023-0168 State: PUBLISHED Published: 2023-02-27T15:24:33.172Z Last Updated: 2025-03-18T15:05:52.162Z Vendors: Unknown Products: Olevmedia Shortcodes Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e854efee-16fc-4379-9e66-d2883e01fb32
CVE ID: CVE-2023-0169 State: PUBLISHED Published: 2023-02-13T14:32:11.933Z Last Updated: 2025-03-21T18:03:11.629Z Vendors: Unknown Products: Form plugin for WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Zoho Forms WordPress plugin before 3.0.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/178d71f2-4666-4f7e-ada5-cb72a50fd663
CVE ID: CVE-2023-0170 State: PUBLISHED Published: 2023-02-06T19:59:34.552Z Last Updated: 2025-03-25T18:08:25.892Z Vendors: Unknown Products: Html5 Audio Player Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Html5 Audio Player WordPress plugin before 2.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/19ee5e33-acc8-40c5-8f54-c9cb0fa491f0
CVE ID: CVE-2023-0171 State: PUBLISHED Published: 2023-02-06T19:59:42.127Z Last Updated: 2025-03-25T19:55:28.863Z Vendors: Unknown Products: jQuery T(-) Countdown Widget Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The jQuery T(-) Countdown Widget WordPress plugin before 2.3.24 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/32324655-ff91-4a53-a2c5-ebe6678d4a9d
CVE ID: CVE-2023-0172 State: PUBLISHED Published: 2023-03-13T16:03:33.143Z Last Updated: 2025-02-27T15:56:34.947Z Vendors: Unknown Products: Embed, curate & aggregate social media feeds into your website using JUICER Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Juicer WordPress plugin before 1.11 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c8982b8d-985f-4a
Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c8982b8d-985f-4a5d-840d-e8be7c3405bd
CVE ID: CVE-2023-0173 State: PUBLISHED Published: 2023-02-06T19:59:32.104Z Last Updated: 2025-03-25T18:10:37.107Z Vendors: Unknown Products: Drag & Drop Sales Funnel Builder for WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Drag & Drop Sales Funnel Builder for WordPress plugin before 2.6.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c543b6e2-a7c0
st Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/c543b6e2-a7c0-4ba7-a308-e9951dd59fb9
CVE ID: CVE-2023-0174 State: PUBLISHED Published: 2023-02-06T19:59:14.952Z Last Updated: 2025-03-25T20:42:58.406Z Vendors: Unknown Products: WP VR Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP VR WordPress plugin before 8.2.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/6b53d0e6-def9-4907-bd2b-884b2afa52b3
CVE ID: CVE-2023-0175 State: PUBLISHED Published: 2023-03-20T15:52:09.113Z Last Updated: 2025-02-26T18:46:57.897Z Vendors: Unknown Products: Responsive Clients Logo Gallery Plugin for WordPress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Responsive Clients Logo Gallery Plugin for WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/
itional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cdcd3c2c-cb29-4b21-8d3d-7eafbc1d3098
CVE ID: CVE-2023-0176 State: PUBLISHED Published: 2023-02-06T19:59:46.410Z Last Updated: 2025-03-25T18:04:00.655Z Vendors: Unknown Products: Giveaways and Contests by RafflePress Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Giveaways and Contests by RafflePress WordPress plugin before 1.11.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a762c25b-5c47-400e-8
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/a762c25b-5c47-400e-8964-407cf4c94e9f
CVE ID: CVE-2023-0177 State: PUBLISHED Published: 2023-02-13T14:32:32.510Z Last Updated: 2025-03-20T20:01:47.774Z Vendors: Unknown Products: Social Like Box and Page by WpDevArt Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Social Like Box and Page by WpDevArt WordPress plugin before 0.8.41 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/712c2154-37f4-424c-ba3
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/712c2154-37f4-424c-ba3b-26ba6aa95bca
CVE ID: CVE-2023-0178 State: PUBLISHED Published: 2023-02-06T19:59:08.721Z Last Updated: 2025-03-26T13:50:56.955Z Vendors: Unknown Products: Annual Archive Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Annual Archive WordPress plugin before 1.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/cc308e15-7937-4d41-809d-74f8c13bee23
CVE ID: CVE-2023-0179 State: PUBLISHED Published: 2023-03-27T00:00:00.000Z Last Updated: 2025-02-19T16:12:13.054Z Vendors: n/a Products: kernel Problem Types: CWE-190 Description: A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2161713 - https://seclists.org/oss-sec/2023/q1/20 - http://packetstormsecurity.com/files/171601/Kernel-Live-Patch-Security-Notice-L
ttps://seclists.org/oss-sec/2023/q1/20 - http://packetstormsecurity.com/files/171601/Kernel-Live-Patch-Security-Notice-LNS-0093-1.html - https://security.netapp.com/advisory/ntap-20230511-0003/
CVE ID: CVE-2023-0180 State: PUBLISHED Published: 2023-04-01T04:28:11.482Z Last Updated: 2025-02-13T16:38:43.627Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: NVIDIA Products: vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of service or information disclosure. Additional Analyst Notes: - CVE Program
de layer handler, which may lead to denial of service or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2023-0181 State: PUBLISHED Published: 2023-04-01T04:30:27.930Z Last Updated: 2025-02-13T16:38:44.245Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: vGPU software (guest driver - Windows), vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) Problem Types: CWE-280 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, wher
scription: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly checked, which may lead to denial of service and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2023-0182 State: PUBLISHED Published: 2023-04-01T04:31:21.730Z Last Updated: 2025-02-11T16:41:20.311Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: NVIDIA Products: vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452
CVE ID: CVE-2023-0183 State: PUBLISHED Published: 2023-04-01T04:34:10.313Z Last Updated: 2025-02-13T16:38:44.880Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: NVIDIA Products: vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can lead to denial of service and data tampering. Additional Analyst Notes: - CV
mode layer where an out-of-bounds write can lead to denial of service and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2023-0184 State: PUBLISHED Published: 2023-04-22T02:18:16.993Z Last Updated: 2025-02-13T16:38:45.624Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-822 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler which may lead to denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2023-0185 State: PUBLISHED Published: 2023-04-01T04:38:58.626Z Last Updated: 2025-02-13T16:38:46.189Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H) Vendors: NVIDIA Products: vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) Problem Types: CWE-196 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to signed may lead to denial of service or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP V
may lead to denial of service or information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2023-0186 State: PUBLISHED Published: 2023-04-01T04:41:14.602Z Last Updated: 2025-02-11T17:11:33.865Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H) Vendors: NVIDIA Products: vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) Problem Types: CWE-787 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452
CVE ID: CVE-2023-0187 State: PUBLISHED Published: 2023-04-01T04:44:23.877Z Last Updated: 2025-02-13T16:38:47.195Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: NVIDIA Products: vGPU software (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Windows) Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an out-of-bounds read can lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2023-0188 State: PUBLISHED Published: 2023-04-01T04:45:45.241Z Last Updated: 2025-02-13T16:38:47.743Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: vGPU software (guest driver - Windows), vGPU software (guest driver - Linux), vGPU software (Virtual GPU Manager - Citrix Hypervisor, VMware vSphere, Red Hat Enterprise Linux KVM), NVIDIA Cloud Gaming (guest driver - Windows), NVIDIA Cloud Gaming (guest driver - Linux), NVIDIA Cloud Gaming (Virtual GPU Manager - Red Hat Enterprise Linux KVM) Problem Types: CWE-119 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler,
Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause improper restriction of operations within the bounds of a memory buffer cause an out-of-bounds read, which may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2023-0189 State: PUBLISHED Published: 2023-04-01T04:49:11.470Z Last Updated: 2025-02-13T16:38:48.297Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: NVIDIA Products: vGPU software (guest driver - Linux), NVIDIA Cloud Gaming (guest driver - Linux) Problem Types: CWE-822 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer handler which may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https:
gram Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02
CVE ID: CVE-2023-0190 State: PUBLISHED Published: 2023-04-22T02:19:06.133Z Last Updated: 2025-02-13T16:38:48.911Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: NVIDIA GPU Display Driver Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a NULL pointer dereference may lead to denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5452 - https://security.gentoo.org/glsa/202310-02