rainbutterfly/cve_corpus huggingface dataset:
CVE-2024-0053 
In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
Problem types: description: Information disclosure
Affected products: vendor: Google
product: Android
default_status: unaffected
Published: 2024-03-11T16:35:22.542Z
CVE-2024-0054 
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs local_list.cgi, create_overlay.cgi and irissetup.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS
versions for the highlighted flaw. Please refer to the Axis security advisory
for more information and solution.
Problem types: cwe_id: CWE-155
description: CWE-155: Improper Neutralization of Wildcards or Matching Symbols
Affected products: vendor: Axis Communications AB
product: AXIS OS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-03-19T06:35:15.078Z
CVE-2024-0055 
Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX APIs mediaclip.cgi and playclip.cgi was vulnerable for file globbing which could lead to a resource exhaustion attack. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Problem types: cwe_id: CWE-155
description: CWE-155: Improper Neutralization of Wildcards or Matching Symbols
Affected products: vendor: Axis Communications AB
product: AXIS OS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-03-19T06:39:24.100Z
CVE-2024-0056 Microsoft.Data.SqlClient and System.Data.SqlClient SQL Data Provider Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Microsoft
product: Microsoft SQL Server 2022 (GDR)
vendor: Microsoft
product: .NET 6.0
vendor: Microsoft
product: .NET 7.0
vendor: Microsoft
product: .NET 8.0
vendor: Microsoft
product: Microsoft.Data.SqlClient
vendor: Microsoft
product: Microsoft.Data.SqlClient
vendor: Microsoft
product: Microsoft.Data.SqlClient
vendor: Microsoft
product: Microsoft.Data.SqlClient
vendor: Microsoft
product: System.Data.SqlClient
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.2
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.8
vendor: Microsoft
product: Microsoft SQL Server 2022 (CU 10)
vendor: Microsoft
product: Microsoft .NET Framework 4.8
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.8
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.8.1
vendor: Microsoft
product: Microsoft .NET Framework 2.0 Service Pack 2
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 8.7
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C
Published: 2024-01-09T17:56:58.972Z
CVE-2024-0057 NET, .NET Framework, and Visual Studio Security Feature Bypass Vulnerability
Problem types: cwe_id: CWE-20
description: CWE-20: Improper Input Validation
Affected products: vendor: Microsoft
product: .NET 8.0
vendor: Microsoft
product: .NET 7.0
vendor: Microsoft
product: .NET 6.0
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.2
vendor: Microsoft
product: Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.4
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.6
vendor: Microsoft
product: Microsoft Visual Studio 2022 version 17.8
vendor: Microsoft
product: NuGet 5.11.0
vendor: Microsoft
product: NuGet 17.4.0
vendor: Microsoft
product: NUGET 17.6.0
vendor: Microsoft
product: NuGet 17.8.0
vendor: Microsoft
product: PowerShell 7.2
vendor: Microsoft
product: PowerShell 7.3
vendor: Microsoft
product: PowerShell 7.4
vendor: Microsoft
product: Microsoft .NET Framework 4.8
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.8
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2
vendor: Microsoft
product: Microsoft .NET Framework 3.5 AND 4.8.1
vendor: Microsoft
product: Microsoft .NET Framework 2.0 Service Pack 2
vendor: Microsoft
product: Microsoft .NET Framework 3.0 Service Pack 2
CVSS v3.1: version: 3.1
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C
Published: 2024-01-09T17:56:59.552Z
CVE-2024-0066 
Johan Fagerström, member of the AXIS OS Bug Bounty Program, has found that a O3C feature may expose sensitive traffic between the client (Axis device) and (O3C) server. If O3C is not being used this flaw does not apply. 
Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Problem types: cwe_id: CWE-319
description: CWE-319: Cleartext Transmission of Sensitive Information
Affected products: vendor: Axis Communications AB
product: AXIS OS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 5.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2024-06-18T06:10:25.800Z
CVE-2024-0067 
Marinus Pfund, member of the AXIS OS Bug Bounty Program, 
has found the VAPIX API ledlimit.cgi was vulnerable for path traversal attacks allowing to list folder/file names on the local file system of the Axis device. 
Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.
Problem types: cwe_id: CWE-35
description: CWE-35: Path Traversal
Affected products: vendor: Axis Communications AB
product: AXIS OS
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
Published: 2024-09-10T04:54:45.733Z
CVE-2024-0068 
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1.


Problem types: cwe_id: CWE-59
description: CWE-59 Improper Link Resolution Before File Access ('Link Following')
Affected products: vendor: HYPR
product: Workforce Access
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
version: 3.1
Published: 2024-02-29T19:51:38.562Z
CVE-2024-0071 CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can cause an out-of-bounds write. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Problem types: cwe_id: CWE-125
description: CWE-125
Affected products: vendor: nvidia
product: GPU Display driver, vGPU driver, Cloud Gaming driver
default_status: unaffected
CVSS v3.1: baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-03-27T21:52:24.951Z
CVE-2024-0072 

NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service.


Problem types: cwe_id: CWE-476
description: CWE-476 NULL Pointer Dereference
Affected products: vendor: NVIDIA
product: NVIDIA CUDA Toolkit
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-04-05T17:48:13.286Z
CVE-2024-0073 CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer when the driver is performing an operation at a privilege level that is higher than the minimum level required. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: nvidia
product: GPU Display driver, vGPU driver, Cloud Gaming driver
default_status: unaffected
CVSS v3.1: baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-03-27T21:52:25.390Z
CVE-2024-0074 CVE
NVIDIA GPU Display Driver for Linux contains a vulnerability where an attacker may access a memory location after the end of the buffer. A successful exploit of this vulnerability may lead to denial of service and data tampering.
Problem types: cwe_id: CWE-788
description: CWE-788
Affected products: vendor: nvidia
product: GPU Display driver, vGPU driver, Cloud Gaming driver
default_status: unaffected
CVSS v3.1: baseScore: 7.1
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Published: 2024-03-27T21:52:25.828Z
CVE-2024-0075 CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user may cause a NULL-pointer dereference by accessing passed parameters the validity of which has not been checked. A successful exploit of this vulnerability may lead to denial of service and limited information disclosure.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: nvidia
product: GPU Display driver, vGPU driver, Cloud Gaming driver
default_status: unaffected
CVSS v3.1: baseScore: 6.1
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
version: 3.1
Published: 2024-03-27T21:52:26.716Z
CVE-2024-0076 

NVIDIA CUDA toolkit for all platforms contains a vulnerability in cuobjdump and nvdisasm where an attacker may cause a crash by tricking a user into reading a malformed ELF file. A successful exploit of this vulnerability may lead to a partial denial of service.


Problem types: cwe_id: CWE-125
description: CWE-125 Out-of-bounds Read
Affected products: vendor: NVIDIA
product: NVIDIA CUDA Toolkit
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 3.3
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-04-05T17:50:06.319Z
CVE-2024-0077 CVE
NVIDIA Virtual GPU Manager contains a vulnerability in the vGPU plugin, where it allows a guest OS to allocate resources for which the guest OS is not authorized. A successful exploit of this vulnerability may lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Problem types: cwe_id: CWE-285
description: CWE-285
Affected products: vendor: nvidia
product: vGPU driver, Cloud Gaming driver
default_status: unaffected
CVSS v3.1: baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-03-27T21:52:27.188Z
CVE-2024-0078 CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest can cause a NULL-pointer dereference in the host, which may lead to denial of service.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: nvidia
product: GPU Display driver, vGPU driver, Cloud Gaming driver
default_status: unaffected
CVSS v3.1: baseScore: 6.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
version: 3.1
Published: 2024-03-27T21:52:26.273Z
CVE-2024-0079 CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user in a guest VM can cause a NULL-pointer dereference in the host. A successful exploit of this vulnerability may lead to denial of service.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: nvidia
product: vGPU driver, Cloud Gaming driver
default_status: unaffected
CVSS v3.1: baseScore: 6.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
version: 3.1
Published: 2024-03-27T21:52:27.622Z
CVE-2024-0080 

NVIDIA nvTIFF Library for Windows and Linux contains a vulnerability where improper input validation might enable an attacker to use a specially crafted input file. A successful exploit of this vulnerability might lead to a partial denial of service.


Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: NVIDIA
product: nvTIFF Library
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 2.8
baseSeverity: LOW
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
version: 3.1
Published: 2024-04-05T17:51:30.536Z
CVE-2024-0081 

NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service.


Problem types: cwe_id: CWE-770
description: CWE-770 Allocation of Resources Without Limits or Throttling
Affected products: vendor: NVIDIA
product: NeMo
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.6
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
version: 3.1
Published: 2024-04-05T18:13:24.392Z
CVE-2024-0082 CVE
NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause improper privilege management by sending open file requests to the application. A successful exploit of this vulnerability might lead to local escalation of privileges, information disclosure, and data tampering
Problem types: cwe_id: CWE-269
description: CWE-269
Affected products: vendor: nvidia
product: ChatRTX
default_status: unaffected
CVSS v3.1: baseScore: 8.2
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Published: 2024-04-08T22:00:35.763Z
CVE-2024-0083 CVE
NVIDIA ChatRTX for Windows contains a vulnerability in the UI, where an attacker can cause a cross-site scripting error by network by running malicious scripts in users' browsers. A successful exploit of this vulnerability might lead to code execution, denial of service, and information disclosure.
Problem types: cwe_id: CWE-79
description: CWE-79
Affected products: vendor: nvidia
product: ChatRTX
default_status: unaffected
CVSS v3.1: baseScore: 6.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
version: 3.1
Published: 2024-04-08T22:10:25.070Z
CVE-2024-0084 CVE
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where the guest OS could execute privileged operations. A successful exploit of this vulnerability might lead to information disclosure, data tampering, escalation of privileges, and denial of service.
Problem types: cwe_id: CWE-250
description: CWE-250
Affected products: vendor: nvidia
product: vGPU software and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-06-13T21:23:31.105Z
CVE-2024-0085 CVE
NVIDIA vGPU software for Windows and Linux contains a vulnerability where unprivileged users could execute privileged operations on the host. A successful exploit of this vulnerability might lead to data tampering, escalation of privileges, and denial of service.
Problem types: cwe_id: CWE-266
description: CWE-266
Affected products: vendor: nvidia
product: vGPU software and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 6.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
Published: 2024-06-13T21:23:31.505Z
CVE-2024-0086 CVE
NVIDIA vGPU software for Linux contains a vulnerability where the software can dereference a NULL pointer. A successful exploit of this vulnerability might lead to denial of service and undefined behavior in the vGPU plugin.
Problem types: cwe_id: CWE-476
description: CWE-476
Affected products: vendor: nvidia
product: vGPU software and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 5.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-06-13T21:23:32.289Z
CVE-2024-0087 CVE
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user can set the logging location to an arbitrary file. If this file exists, logs are appended to the file. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Problem types: cwe_id: CWE-73
description: CWE-73
Affected products: vendor: nvidia
product: NVIDIA Triton Inference Server
default_status: unaffected
CVSS v3.1: baseScore: 9
baseSeverity: CRITICAL
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H
version: 3.1
Published: 2024-05-09T21:51:35.714Z
CVE-2024-0088 CVE
NVIDIA Triton Inference Server for Linux contains a vulnerability in shared memory APIs, where a user can cause an improper memory access issue by a network API. A successful exploit of this vulnerability might lead to denial of service and data tampering.
Problem types: cwe_id: CWE-119
description: CWE-119
Affected products: vendor: nvidia
product: NVIDIA Triton Inference Server
default_status: unaffected
CVSS v3.1: baseScore: 5.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H
version: 3.1
Published: 2024-05-09T21:51:36.464Z
CVE-2024-0089 CVE
NVIDIA GPU Display Driver for Windows contains a vulnerability where the information from a previous client or another process could be disclosed. A successful exploit of this vulnerability might lead to code execution, information disclosure, or data tampering.
Problem types: cwe_id: CWE-665
description: CWE-665
Affected products: vendor: nvidia
product: GPU display driver, vGPU software, and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-06-13T21:23:29.198Z
CVE-2024-0090 CVE
NVIDIA GPU driver for Windows and Linux contains a vulnerability where a user can cause an out-of-bounds write. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Problem types: cwe_id: CWE-787
description: CWE-787
Affected products: vendor: nvidia
product: GPU display driver, vGPU software, and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-06-13T21:23:28.800Z
CVE-2024-0091 CVE
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a user can cause an untrusted pointer dereference by executing a driver API. A successful exploit of this vulnerability might lead to denial of service, information disclosure, and data tampering.
Problem types: cwe_id: CWE-822
description: CWE-822
Affected products: vendor: nvidia
product: GPU display driver, vGPU software, and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 7.8
baseSeverity: HIGH
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
version: 3.1
Published: 2024-06-13T21:23:29.556Z
CVE-2024-0092 CVE
NVIDIA GPU Driver for Windows and Linux contains a vulnerability where an improper check or improper handling of exception conditions might lead to denial of service.
Problem types: cwe_id: CWE-703
description: CWE-703
Affected products: vendor: nvidia
product: GPU display driver, vGPU software, and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 5.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-06-13T21:23:30.327Z
CVE-2024-0093 CVE
NVIDIA GPU software for Linux contains a vulnerability where it can expose sensitive information to an actor that is not explicitly authorized to have access to that information. A successful exploit of this vulnerability might lead to information disclosure.
Problem types: cwe_id: CWE-200
description: CWE-200
Affected products: vendor: nvidia
product: vGPU software and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 6.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
version: 3.1
Published: 2024-06-13T21:23:29.967Z
CVE-2024-0094 CVE
NVIDIA vGPU software for Linux contains a vulnerability in the Virtual GPU Manager, where an untrusted guest VM can cause improper control of the interaction frequency in the host. A successful exploit of this vulnerability might lead to denial of service.
Problem types: cwe_id: CWE-799
description: CWE-799
Affected products: vendor: nvidia
product: vGPU software and Cloud Gaming
default_status: unaffected
CVSS v3.1: baseScore: 5.5
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Published: 2024-06-13T21:23:31.858Z
CVE-2024-0095 CVE
NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where a user can inject forged logs and executable commands by injecting arbitrary data as a new log entry. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Problem types: cwe_id: CWE-117
description: CWE-117
Affected products: vendor: nvidia
product: NVIDIA Triton Inference Server
default_status: unaffected
CVSS v3.1: baseScore: 4.3
baseSeverity: MEDIUM
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H
version: 3.1
Published: 2024-06-13T21:16:51.975Z