deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-30016
Published: 2024-01-12
Description: SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via sub_event_id parameter in sub_event_details_edit.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/Pings1031/cve_report/blob/main/judging-management-system/SQLi-2.md; https://github.com/Pings1031/cve_report/blob/main/judging-management-system/SQLi-2.md
CVE: CVE-2023-48909
Published: 2024-01-12
Description: An issue was discovered in Jave2 version 3.3.1, allows attackers to execute arbitrary code via the FFmpeg function.
CVSS Score: 8.8 (HIGH)
References: https://gist.github.com/Dollhouse-18/288b4774bc296722c9e3c60bafa392bf; https://github.com/Dollhouse-18/jave-core-Command-execution-vulnerability; https://gist.github.com/Dollhouse-18/288b4774bc296722c9e3c60bafa392bf
CVE: CVE-2023-49568
Published: 2024-01-12
Description: A denial of service (DoS) vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to perform denial of service attacks by providing specially crafted responses from a Git server which triggers resource exhaustion in go-git clients.

Applications using only the in-memory filesystem supported by go-git are not affected by this vulnerability.
This is a go-git implementation issue and does not affect the upstream git cli.



CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r; https://github.com/go-git/go-git/security/advisories/GHSA-mw99-9chc-xw7r
CVE: CVE-2023-49569
Published: 2024-01-12
Description: A path traversal vulnerability was discovered in go-git versions prior to v5.11. This vulnerability allows an attacker to create and amend files across the filesystem. In the worse case scenario, remote code execution could be achieved.

Applications are only affected if they are using the  ChrootOS https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#ChrootOS , which is the default when using "Plain" versions of Open and Clone funcs (e.g. PlainClone). Applications using  BoundOS https://pkg.go.dev/github.com/go-git/go-billy/v5/osfs#BoundOS  or in-memory filesystems are not affected by this issue.
This is a go-git implementation issue and does not affect the upstream git cli.



CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22
References: https://github.com/go-git/go-git/security/advisories/GHSA-449p-3h89-pw88; https://github.com/go-git/go-git/security/advisories/GHSA-449p-3h89-pw88
CVE: CVE-2023-51790
Published: 2024-01-12
Description: Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the lang parameter in the Admin Tools plug-in component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Piwigo/AdminTools/issues/21; https://github.com/Piwigo/Piwigo/issues/2069; https://github.com/Piwigo/AdminTools/issues/21
CVE: CVE-2023-51806
Published: 2024-01-12
Description: File Upload vulnerability in Ujcms v.8.0.2 allows a local attacker to execute arbitrary code via a crafted file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-434, CWE-434
References: https://github.com/ujcms/ujcms; https://github.com/ujcms/ujcms/issues/8; https://www.ujcms.com/
CVE: CVE-2023-52026
Published: 2024-01-12
Description: TOTOlink EX1800T V9.1.0cu.2112_B20220316 was discovered to contain a remote command execution (RCE) vulnerability via the telnet_enabled parameter of the setTelnetCfg interface
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setTelnetCfg/; https://815yang.github.io/2023/12/11/EX1800T/2/TOTOlinkEX1800T_V9.1.0cu.2112_B2022031setTelnetCfg/
CVE: CVE-2023-0437
Published: 2024-01-12
Description: When calling bson_utf8_validate on some inputs a loop with an exit condition that cannot be reached may occur, i.e. an infinite loop. This issue affects All MongoDB C Driver versions prior to versions 1.25.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-835, CWE-835
References: https://jira.mongodb.org/browse/CDRIVER-4747; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7GUVOAFZFSYTNBF6R7H4XJM5DHWBRQ6P/; https://jira.mongodb.org/browse/CDRIVER-4747
CVE: CVE-2023-2030
Published: 2024-01-12
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 12.2 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which an attacker could potentially modify the metadata of signed commits.
CVSS Score: 3.5 (LOW)
CWE: CWE-347, CWE-347
References: https://gitlab.com/gitlab-org/gitlab/-/issues/407252; https://hackerone.com/reports/1929929; https://gitlab.com/gitlab-org/gitlab/-/issues/407252
CVE: CVE-2023-4812
Published: 2024-01-12
Description: An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge request.
CVSS Score: 7.6 (HIGH)
CWE: CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/424398; https://hackerone.com/reports/2115574; https://gitlab.com/gitlab-org/gitlab/-/issues/424398
CVE: CVE-2023-5356
Published: 2024-01-12
Description: Incorrect authorization checks in GitLab CE/EE from all versions starting from 8.13 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2, allows a user to abuse slack/mattermost integrations to execute slash commands as another user.
CVSS Score: 7.3 (HIGH)
CWE: CWE-863, CWE-863
References: https://gitlab.com/gitlab-org/gitlab/-/issues/427154; https://hackerone.com/reports/2188868; https://gitlab.com/gitlab-org/gitlab/-/issues/427154
CVE: CVE-2023-6955
Published: 2024-01-12
Description: A missing authorization check vulnerability exists in GitLab Remote Development affecting all versions prior to 16.5.6, 16.6 prior to 16.6.4 and 16.7 prior to 16.7.2. This condition allows an attacker to create a workspace in one group that is associated with an agent from another group.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-862, CWE-862
References: https://gitlab.com/gitlab-org/gitlab/-/issues/432188; https://gitlab.com/gitlab-org/gitlab/-/issues/432188
CVE: CVE-2023-7028
Published: 2024-01-12
Description: An issue has been discovered in GitLab CE/EE affecting all versions from 16.1 prior to 16.1.6, 16.2 prior to 16.2.9, 16.3 prior to 16.3.7, 16.4 prior to 16.4.5, 16.5 prior to 16.5.6, 16.6 prior to 16.6.4, and 16.7 prior to 16.7.2 in which user account password reset emails could be delivered to an unverified email address.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-640, CWE-640
References: https://gitlab.com/gitlab-org/gitlab/-/issues/436084; https://hackerone.com/reports/2293343; https://gitlab.com/gitlab-org/gitlab/-/issues/436084
CVE: CVE-2023-49253
Published: 2024-01-12
Description: Root user password is hardcoded into the device and cannot be changed in the user interface.


CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798, CWE-798
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49254
Published: 2024-01-12
Description: Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, however, it can still be exploited by sending POST requests directly.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78, CWE-78
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49255
Published: 2024-01-12
Description: The router console is accessible without authentication at "data" field, and while a user needs to be logged in in order to modify the configuration, the session state is shared. If any other user is currently logged in, the anonymous user can execute commands in the context of the authenticated one. If the logged in user has administrative privileges, it is possible to use webadmin service configuration commands to create a new admin user with a chosen password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-306
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49256
Published: 2024-01-12
Description: It is possible to download the configuration backup without authorization and decrypt included passwords using hardcoded static key.
CVSS Score: 7.5 (HIGH)
CWE: CWE-321, CWE-798
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49257
Published: 2024-01-12
Description: An authenticated user is able to upload an arbitrary CGI-compatible file using the certificate upload utility and execute it with the root user privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-732, CWE-732
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49258
Published: 2024-01-12
Description: User browser may be forced to execute JavaScript and pass the authentication cookie to the attacker leveraging the XSS vulnerability located at "/gui/terminal_tool.cgi" in the "data" parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49259
Published: 2024-01-12
Description: The authentication cookies are generated using an algorithm based on the username, hardcoded secret and the up-time, and can be guessed in a reasonable time.
CVSS Score: 7.5 (HIGH)
CWE: CWE-341, CWE-327
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49260
Published: 2024-01-12
Description: An XSS attack can be performed by changing the MOTD banner and pointing the victim to the "terminal_tool.cgi" path. It can be used together with the vulnerability CVE-2023-49255.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49261
Published: 2024-01-12
Description: The "tokenKey" value used in user authorization is visible in the HTML source of the login page.
CVSS Score: 7.5 (HIGH)
CWE: CWE-201, CWE-200
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-49262
Published: 2024-01-12
Description: The authentication mechanism can be bypassed by overflowing the value of the Cookie "authentication" field, provided there is an active user session.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-190, CWE-287
References: https://cert.pl/en/posts/2024/01/CVE-2023-49253/; https://cert.pl/posts/2024/01/CVE-2023-49253/; https://cert.pl/en/posts/2024/01/CVE-2023-49253/
CVE: CVE-2023-51949
Published: 2024-01-12
Description: Verydows v2.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /protected/controller/backend/role_controller
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://github.com/cui2shark/security/blob/main/Added%20CSRF%20in%20Role%20Controller.md; https://github.com/cui2shark/security/blob/main/Added%20CSRF%20in%20Role%20Controller.md
CVE: CVE-2023-28897
Published: 2024-01-12
Description: The secret value used for access to critical UDS services of the MIB3 infotainment is hardcoded in the firmware.

Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

CVSS Score: 4.0 (MEDIUM)
CWE: CWE-798, CWE-798
References: https://asrg.io/security-advisories/cve-2023-28897; https://asrg.io/security-advisories/cve-2023-28897
CVE: CVE-2023-28898
Published: 2024-01-12
Description: The Real-Time Streaming Protocol implementation in the MIB3 infotainment incorrectly handles requests to /logs URI, when the id parameter equals to zero. This issue allows an attacker connected to the in-vehicle Wi-Fi network to cause denial-of-service of the infotainment system, when the certain preconditions are met.

Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

CVSS Score: 5.3 (MEDIUM)
CWE: CWE-233
References: https://nonexistent.com; https://nonexistent.com
CVE: CVE-2023-51978
Published: 2024-01-12
Description: In PHPGurukul Art Gallery Management System v1.1, "Update Artist Image" functionality of "imageid" parameter is vulnerable to SQL Injection.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://github.com/hackerhijeck/Exploited/blob/main/Art_Gallary/SQL_Injection.md; https://github.com/hackerhijeck/Exploited/blob/main/Art_Gallary/SQL_Injection.md
CVE: CVE-2024-0459
Published: 2024-01-12
Description: A vulnerability has been found in Blood Bank & Donor Management 5.6 and classified as critical. This vulnerability affects unknown code of the file /admin/request-received-bydonar.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250564.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-89
References: https://drive.google.com/file/d/1nSgSw1cTXZWeYTjt4rliMIDHyQcGK-8z/view?usp=sharing; https://vuldb.com/?ctiid.250564; https://vuldb.com/?id.250564
CVE: CVE-2024-0460
Published: 2024-01-12
Description: A vulnerability was found in code-projects Faculty Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/pages/student-print.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250565 was assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BxYQ/vul/blob/main/2Faculty%20Management%20System-SQL.pdf; https://vuldb.com/?ctiid.250565; https://vuldb.com/?id.250565
CVE: CVE-2024-22492
Published: 2024-01-12
Description: A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/cui2shark/security/blob/main/%28JFinalcms%20contact%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20contact%20para.md; https://github.com/cui2shark/security/blob/main/%28JFinalcms%20contact%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20contact%20para.md
CVE: CVE-2024-22493
Published: 2024-01-12
Description: A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/cui2shark/security/blob/main/%28JFinalcms%20content%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20content%20para.md; https://github.com/cui2shark/security/blob/main/%28JFinalcms%20content%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20content%20para.md
CVE: CVE-2024-22494
Published: 2024-01-12
Description: A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/cui2shark/security/blob/main/%28JFinalcms%20moblie%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20moblie%20para.md; https://github.com/cui2shark/security/blob/main/%28JFinalcms%20moblie%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20moblie%20para.md
CVE: CVE-2023-28899
Published: 2024-01-12
Description: By sending a specific reset UDS request via OBDII port of Skoda vehicles, it is possible to cause vehicle engine shutdown and denial of service of other vehicle components even when the vehicle is moving at a high speed. No safety critical functions affected. 
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-770
References: https://asrg.io/security-advisories/cve-2023-28899; https://asrg.io/security-advisories/cve-2023-28899
CVE: CVE-2023-31036
Published: 2024-01-12
Description: NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where, when it is launched with the non-default command line option --model-control explicit, an attacker may use the model load API to cause a relative path traversal. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.5 (HIGH)
CWE: CWE-23, CWE-22
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5509; https://nvidia.custhelp.com/app/answers/detail/a_id/5509
CVE: CVE-2023-46805
Published: 2024-01-12
Description: An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
CVSS Score: 8.2 (HIGH)
CWE: CWE-287
References: http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html; https://forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US; http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html
CVE: CVE-2024-0461
Published: 2024-01-12
Description: A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been classified as critical. Affected is an unknown function of the file deactivate.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-250566 is the identifier assigned to this vulnerability.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BxYQ/vul/blob/main/3ONLINE_FACULTY_CLEARANCE_SYSTEM%20has%20SQL1.pdf; https://vuldb.com/?ctiid.250566; https://vuldb.com/?id.250566
CVE: CVE-2024-21887
Published: 2024-01-12
Description: A command injection vulnerability in web components of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x)  allows an authenticated administrator to send specially crafted requests and execute arbitrary commands on the appliance.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-77, CWE-77
References: http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html; https://forums.ivanti.com/s/article/CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US; http://packetstormsecurity.com/files/176668/Ivanti-Connect-Secure-Unauthenticated-Remote-Code-Execution.html
CVE: CVE-2024-0462
Published: 2024-01-12
Description: A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /production/designee_view_status.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-250567.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BxYQ/vul/blob/main/3ONLINE_FACULTY_CLEARANCE_SYSTEM%20has%20SQL2.pdf; https://vuldb.com/?ctiid.250567; https://vuldb.com/?id.250567
CVE: CVE-2024-0463
Published: 2024-01-12
Description: A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/admin_view_info.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250568.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: https://github.com/BxYQ/vul/blob/main/3ONLINE_FACULTY_CLEARANCE_SYSTEM%20has%20SQL3.pdf; https://vuldb.com/?ctiid.250568; https://vuldb.com/?id.250568
CVE: CVE-2023-31024
Published: 2024-01-12
Description: NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5510; https://nvidia.custhelp.com/app/answers/detail/a_id/5510
CVE: CVE-2023-31025
Published: 2024-01-12
Description: NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-90, CWE-74
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5510; https://nvidia.custhelp.com/app/answers/detail/a_id/5510
CVE: CVE-2023-31029
Published: 2024-01-12
Description: NVIDIA DGX A100 baseboard management controller (BMC) contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5510; https://nvidia.custhelp.com/app/answers/detail/a_id/5510
CVE: CVE-2023-31030
Published: 2024-01-12
Description: NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-121, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5510; https://nvidia.custhelp.com/app/answers/detail/a_id/5510
CVE: CVE-2023-31031
Published: 2024-01-12
Description: NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.
CVSS Score: 4.2 (MEDIUM)
CWE: CWE-122, CWE-787
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5510; https://nvidia.custhelp.com/app/answers/detail/a_id/5510
CVE: CVE-2023-31032
Published: 2024-01-12
Description: NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-627, CWE-913
References: https://nvidia.custhelp.com/app/answers/detail/a_id/5510; https://nvidia.custhelp.com/app/answers/detail/a_id/5510