nvidia

867 tracked vulnerabilities.

CVE-2023-31008 HIGH
NVIDIA DGX H100 Firmware < 23.08.18 - Improper Input Validation in IPMI
Sep 20, 2023
CVSS 7.3
EPSS 0.00
CVE-2023-25534 MEDIUM
NVIDIA DGX H100 BMC < 23.08.18 - Improper Input Validation in IPMI
Sep 20, 2023
CVSS 5.7
EPSS 0.00
CVE-2023-25533 HIGH
NVIDIA DGX H100 Firmware < 23.08.18 - Improper Input Validation in Web UI
Sep 20, 2023
CVSS 8.3
EPSS 0.00
CVE-2023-25532 MEDIUM
NVIDIA DGX H100 Firmware < 23.08.18 - Insufficiently Protected Credentials in IPMI
Sep 20, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-25531 HIGH
NVIDIA DGX H100 Firmware < 23.08.18 - Insufficiently Protected Credentials in IPMI
Sep 20, 2023
CVSS 7.6
EPSS 0.00
CVE-2023-25530 HIGH
NVIDIA DGX H100 BMC < 23.08.18 - Improper Input Validation in KVM Service
Sep 20, 2023
CVSS 8.0
EPSS 0.00
CVE-2023-25529 HIGH
NVIDIA DGX H100 and A100 BMC < 23.08.18 - Unauthenticated Session Token Leak via Timing Discrepancy
Sep 20, 2023
CVSS 8.0
EPSS 0.00
CVE-2023-25528 HIGH
NVIDIA DGX H100 Firmware < 23.08.18 - Unauthenticated Stack-based Buffer Overflow via Web Server Plugin
Sep 20, 2023
CVSS 8.8
EPSS 0.00
CVE-2023-25527 HIGH
NVIDIA DGX H100 BMC < 23.08.18 - Authenticated Memory Corruption in KVM Daemon
Sep 20, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-25526 MEDIUM
NVIDIA Cumulus Linux < 5.5.0 - Denial of Service via Crafted Packet Injection
Sep 20, 2023
CVSS 6.5
EPSS 0.00
CVE-2023-25525 HIGH
NVIDIA Cumulus Linux < 5.6.0 - Information Disclosure via VxLAN-Encapsulated IPv6 Packet Forwarding
Sep 20, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-25519 HIGH
NVIDIA ConnectX Host Firmware - Privilege Escalation
Sep 12, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-25524 MEDIUM
NVIDIA Omniverse Launcher < 1.8.11 - Access Token Exposure in Browser Address Bar
Aug 03, 2023
CVSS 4.0
EPSS 0.00
CVE-2023-25523 LOW
NVIDIA CUDA Toolkit < 12.2 - Denial of Service via Malformed ELF File in nvdisasm
Jul 04, 2023
CVSS 3.3
EPSS 0.00
CVE-2023-25522 HIGH
NVIDIA DGX A100/A800 Firmware < 1.21 - DoS, Info Disclosure, Data Tampering via SBIOS
Jul 04, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-25521 HIGH
NVIDIA DGX A100/A800 Firmware < 1.21 - Privilege Escalation via SBIOS Input Parameter Validation
Jul 04, 2023
CVSS 7.5
EPSS 0.00
CVE-2023-25517 HIGH
NVIDIA GPU Display Driver < 11.13 - Improper Authorization in vGPU Plugin
Jul 04, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-25516 HIGH
NVIDIA GPU Display Driver < 11.12 - Integer Overflow Leading to Information Disclosure and Denial of Service
Jul 04, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-25520 MEDIUM
NVIDIA Jetson Linux < 32.7.4 - Denial of Service via nvbootctrl Invalid Settings
Jun 23, 2023
CVSS 4.4
EPSS 0.00
CVE-2023-25518 HIGH
NVIDIA Jetson Linux < 32.7.4 - Arbitrary Memory Read/Write via PCIe Controller
Jun 23, 2023
CVSS 7.1
EPSS 0.00
CVE-2023-25515 HIGH
NVIDIA GPU Display Driver 470-474.44, 470-470.199.02 - Untrusted Pointer Dereference
Jun 23, 2023
CVSS 7.8
EPSS 0.00
CVE-2023-25514 MEDIUM
NVIDIA CUDA Toolkit < 12.1.1 - Out-of-bounds Read in cuobjdump
Apr 22, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-25513 MEDIUM
NVIDIA CUDA Toolkit < 12.0.1 - Out-of-bounds Read in cuobjdump via Malformed Input File
Apr 22, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-25512 MEDIUM
NVIDIA CUDA Toolkit < 12.1.0 - Out-of-bounds Read in cuobjdump
Apr 22, 2023
CVSS 5.3
EPSS 0.00
CVE-2023-25511 LOW
NVIDIA CUDA Toolkit < 12.1.1 - Denial of Service via cuobjdump Division-by-Zero
Apr 22, 2023
CVSS 3.3
EPSS 0.00