Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0068 State: PUBLISHED Published: 2024-02-29T19:51:38.562Z Last Updated: 2024-09-03T18:20:05.758Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: HYPR Products: Workforce Access Problem Types: CWE-59 Description: Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hypr.com/trust-center/security-advisories
CVE ID: CVE-2024-0069 State: REJECTED Published: N/A Last Updated: 2023-11-27T23:53:15.051991Z Description: No description available.
CVE ID: CVE-2024-0070 State: REJECTED Published: N/A Last Updated: 2023-11-27T23:53:26.258747Z Description: No description available.
CVE ID: CVE-2024-0071 State: PUBLISHED Published: 2024-03-27T21:52:24.951Z Last Updated: 2025-11-04T18:22:13.975Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: nvidia Products: GPU Display driver, vGPU driver, Cloud Gaming driver Problem Types: CWE-125 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: Referenc
ion disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5520
CVE ID: CVE-2024-0072 State: PUBLISHED Published: 2024-04-05T17:48:13.286Z Last Updated: 2024-08-01T17:41:15.878Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-476 Description: NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://nvidia.custhelp.com/app/answers/detail/a_id/5517
CVE ID: CVE-2024-0073 State: PUBLISHED Published: 2024-03-27T21:52:25.390Z Last Updated: 2024-08-01T17:41:15.913Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: GPU Display driver, vGPU driver, Cloud Gaming driver Problem Types: CWE-250 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer when the driver is performing an operation at a privilege level that is higher than the minimum level required. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vul
service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5520
CVE ID: CVE-2024-0074 State: PUBLISHED Published: 2024-03-27T21:52:25.828Z Last Updated: 2024-08-01T17:41:16.440Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: nvidia Products: GPU Display driver, vGPU driver, Cloud Gaming driver Problem Types: CWE-788 Description: NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5520
CVE ID: CVE-2024-0075 State: PUBLISHED Published: 2024-03-27T21:52:26.716Z Last Updated: 2024-08-01T17:41:16.431Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H) Vendors: nvidia Products: GPU Display driver, vGPU driver, Cloud Gaming driver Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user may cause a NULL-pointer dereference by accessing passed parameters the validity of which has not been checked. A successful exploit of this vulnerability may lead to denial of service and limited information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - h
ited information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5520
CVE ID: CVE-2024-0076 State: PUBLISHED Published: 2024-04-05T17:50:06.319Z Last Updated: 2024-09-04T15:03:58.047Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: NVIDIA CUDA Toolkit Problem Types: CWE-125 Description: NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5517
CVE ID: CVE-2024-0077 State: PUBLISHED Published: 2024-03-27T21:52:27.188Z Last Updated: 2024-08-27T16:28:09.672Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: vGPU driver, Cloud Gaming driver Problem Types: CWE-285 Description: NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
e, and data tampering. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5520
CVE ID: CVE-2024-0078 State: PUBLISHED Published: 2024-03-27T21:52:26.273Z Last Updated: 2025-04-08T20:46:55.200Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: nvidia Products: GPU Display driver, vGPU driver, Cloud Gaming driver Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference in the host, which may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5520
CVE ID: CVE-2024-0079 State: PUBLISHED Published: 2024-03-27T21:52:27.622Z Last Updated: 2024-08-01T17:41:15.829Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: nvidia Products: vGPU driver, Cloud Gaming driver Problem Types: CWE-476 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest VM can cause a NULL-pointer dereference in the host. A successful exploit of this vulnerability may lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5520
CVE ID: CVE-2024-0080 State: PUBLISHED Published: 2024-04-05T17:51:30.536Z Last Updated: 2024-08-01T17:41:15.815Z Severity: LOW (CVSS 2.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L) Vendors: NVIDIA Products: nvTIFF Library Problem Types: CWE-20 Description: NVIDIA nvTIFF Library for Windows and Linux contains a vulnerability where improper input validation might enable an attacker to use a specially crafted input file. A successful exploit of this vulnerability might lead to a partial denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://https://nvidia.custhelp.com/app/answers/detail/a_id/5517
CVE ID: CVE-2024-0081 State: PUBLISHED Published: 2024-04-05T18:13:24.392Z Last Updated: 2024-08-01T17:41:15.959Z Severity: HIGH (CVSS 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: NVIDIA Products: NeMo Problem Types: CWE-770 Description: NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/NVIDIA/NeMo/security/advisories/GHSA-x392-p65g-4rxx
CVE ID: CVE-2024-0082 State: PUBLISHED Published: 2024-04-08T22:00:35.763Z Last Updated: 2024-08-01T17:41:16.012Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: nvidia Products: ChatRTX Problem Types: CWE-269 Description: NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges, information disclosure, and data tampering Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/
es: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5532
CVE ID: CVE-2024-0083 State: PUBLISHED Published: 2024-04-08T22:10:25.070Z Last Updated: 2025-08-26T19:58:07.276Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L) Vendors: nvidia Products: ChatRTX Problem Types: CWE-79 Description: NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause a cross-site scripting error by network by running malicious scripts in users' browsers. A successful exploit of this vulnerability might lead to code execution, denial of service, and information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/55
: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5532
CVE ID: CVE-2024-0084 State: PUBLISHED Published: 2024-06-13T21:23:31.105Z Last Updated: 2024-08-01T17:41:15.927Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: vGPU software and Cloud Gaming Problem Types: CWE-250 Description: NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileges, and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail
st Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0085 State: PUBLISHED Published: 2024-06-13T21:23:31.505Z Last Updated: 2024-08-19T17:00:44.334Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: nvidia Products: vGPU software and Cloud Gaming Problem Types: CWE-266 Description: NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0086 State: PUBLISHED Published: 2024-06-13T21:23:32.289Z Last Updated: 2024-08-01T17:41:15.913Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: nvidia Products: vGPU software and Cloud Gaming Problem Types: CWE-476 Description: NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0087 State: PUBLISHED Published: 2024-05-09T21:51:35.714Z Last Updated: 2024-08-01T17:41:15.967Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H) Vendors: nvidia Products: NVIDIA Triton Inference Server Problem Types: CWE-73 Description: NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
nformation disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5535
CVE ID: CVE-2024-0088 State: PUBLISHED Published: 2024-05-09T21:51:36.464Z Last Updated: 2024-08-01T17:41:15.698Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H) Vendors: nvidia Products: NVIDIA Triton Inference Server Problem Types: CWE-119 Description: NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access issue by a network API. A successful exploit of this vulnerability might lead to denial of service and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5535
CVE ID: CVE-2024-0089 State: PUBLISHED Published: 2024-06-13T21:23:29.198Z Last Updated: 2024-08-01T17:41:15.971Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: GPU display driver, vGPU software, and Cloud Gaming Problem Types: CWE-665 Description: NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0090 State: PUBLISHED Published: 2024-06-13T21:23:28.800Z Last Updated: 2024-08-01T17:41:15.818Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: GPU display driver, vGPU software, and Cloud Gaming Problem Types: CWE-787 Description: NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answe
nal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0091 State: PUBLISHED Published: 2024-06-13T21:23:29.556Z Last Updated: 2024-08-01T17:41:15.985Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: GPU display driver, vGPU software, and Cloud Gaming Problem Types: CWE-822 Description: NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/ans
ional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0092 State: PUBLISHED Published: 2024-06-13T21:23:30.327Z Last Updated: 2024-08-01T17:41:15.947Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: nvidia Products: GPU display driver, vGPU software, and Cloud Gaming Problem Types: CWE-703 Description: NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0093 State: PUBLISHED Published: 2024-06-13T21:23:29.967Z Last Updated: 2024-08-19T17:01:50.663Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N) Vendors: nvidia Products: vGPU software and Cloud Gaming Problem Types: CWE-200 Description: NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0094 State: PUBLISHED Published: 2024-06-13T21:23:31.858Z Last Updated: 2024-08-01T17:41:16.124Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: nvidia Products: vGPU software and Cloud Gaming Problem Types: CWE-799 Description: NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0095 State: PUBLISHED Published: 2024-06-13T21:16:51.975Z Last Updated: 2024-08-01T17:41:15.986Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H) Vendors: nvidia Products: NVIDIA Triton Inference Server Problem Types: CWE-117 Description: NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Contain
es, information disclosure, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5546
CVE ID: CVE-2024-0096 State: PUBLISHED Published: 2024-05-09T22:16:43.086Z Last Updated: 2024-08-01T17:41:15.883Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: nvidia Products: ChatRTX Problem Types: CWE-269 Description: NVIDIA ChatRTX for Windows contains a vulnerability in Chat RTX UI, where a user can cause an improper privilege management issue by sending user inputs to change execution flow. A successful exploit of this vulnerability might lead to information disclosure, escalation of privileges, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_
Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5533
CVE ID: CVE-2024-0097 State: PUBLISHED Published: 2024-05-09T22:16:43.481Z Last Updated: 2024-08-01T17:41:15.925Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N) Vendors: nvidia Products: ChatRTX Problem Types: CWE-269 Description: NVIDIA ChatRTX for Windows contains a vulnerability in ChatRTX UI, where a user can cause an improper privilege management issue by exploiting interprocess communication between different processes. A successful exploit of this vulnerability might lead to information disclosure, escalation of privileges, and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/a
Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5533
CVE ID: CVE-2024-0098 State: PUBLISHED Published: 2024-05-09T22:16:43.873Z Last Updated: 2024-08-01T17:41:15.925Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: nvidia Products: ChatRTX Problem Types: CWE-319 Description: NVIDIA ChatRTX for Windows contains a vulnerability in the ChatRTX UI and backend, where a user can cause a clear-text transmission of sensitive information issue by data sniffing. A successful exploit of this vulnerability might lead to information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5533
CVE ID: CVE-2024-0099 State: PUBLISHED Published: 2024-06-13T21:23:30.685Z Last Updated: 2024-08-01T17:41:15.985Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: nvidia Products: vGPU software and Cloud Gaming Problem Types: CWE-120 Description: NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could cause buffer overrun in the host. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileges, and denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/det
alyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5551
CVE ID: CVE-2024-0100 State: PUBLISHED Published: 2024-05-09T21:51:36.086Z Last Updated: 2024-08-01T17:41:15.921Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: nvidia Products: NVIDIA Triton Inference Server Problem Types: CWE-73 Description: NVIDIA Triton Inference Server for Linux contains a vulnerability in the tracing API, where a user can corrupt system files. A successful exploit of this vulnerability might lead to denial of service and data tampering. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5535
CVE ID: CVE-2024-0101 State: PUBLISHED Published: 2024-08-08T17:11:07.194Z Last Updated: 2024-08-08T18:12:46.321Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: NVIDIA Products: Mellanox OS, ONYX, Skyway, MetroX-3 XC, MetroX-2 Problem Types: CWE-693 Description: NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerability might lead to denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvidia.custhelp.com/app/answers/detail/a_id/5559