nvidia

867 tracked vulnerabilities.

CVE-2025-23268 HIGH
NVIDIA Triton Inference Server < 25.07 - Remote Code Execution via DALI Backend
Sep 17, 2025
CVSS 8.0
EPSS 0.00
CVE-2025-23344 HIGH
NVIDIA NVDebug < 1.7.0 - Remote Code Execution
Sep 09, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-23343 HIGH
NVIDIA NVDebug < 1.7.0 - Path Traversal and Arbitrary File Write
Sep 09, 2025
CVSS 7.6
EPSS 0.00
CVE-2025-23342 HIGH
NVIDIA NVDebug < 1.7.0 - Insufficiently Protected Credentials
Sep 09, 2025
CVSS 8.2
EPSS 0.00
CVE-2025-23302 MEDIUM
NVIDIA HGX and DGX Hopper <= 1.7.1 and Blackwell <= 1.2.0 - Denial of Service via LS10 Debug Access Misconfiguration
Sep 04, 2025
CVSS 4.2
EPSS 0.00
CVE-2025-23301 MEDIUM
NVIDIA HGX and DGX Hopper <= 1.7.1 and Blackwell <= 1.2.0 - Denial of Service via VBIOS Debug Access Misconfiguration
Sep 04, 2025
CVSS 4.2
EPSS 0.00
CVE-2025-23262 MEDIUM
NVIDIA ConnectX - Privilege Escalation
Sep 04, 2025
CVSS 6.3
EPSS 0.00
CVE-2025-23261 MEDIUM
NVIDIA Cumulus Linux/NVOS - Info Disclosure
Sep 04, 2025
CVSS 5.5
EPSS 0.00
CVE-2025-23259 MEDIUM
NVIDIA Mellanox DPDK - Info Disclosure, DoS
Sep 04, 2025
CVSS 6.5
EPSS 0.00
CVE-2025-23258 HIGH
NVIDIA DOCA collectx-dpeserver 2.5-2.5.3 2.9-2.9.2 2.10 - Privilege Escalation
Sep 04, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-23257 HIGH
NVIDIA DOCA collectx-clxapidev < 2.9.3 and 2.10 - Privilege Escalation via Incorrect Permission Assignment
Sep 04, 2025
CVSS 7.3
EPSS 0.00
CVE-2025-23256 HIGH
NVIDIA BlueField - Privilege Escalation
Sep 04, 2025
CVSS 8.7
EPSS 0.00
CVE-2025-23315 HIGH
NVIDIA NeMo < 2.4.0 - Code Injection in Export and Deploy Component
Aug 26, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23314 HIGH
NVIDIA NeMo < 2.4.0 - Code Injection in NLP Component
Aug 26, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23313 HIGH
NVIDIA NeMo < 2.4.0 - Code Injection in NLP Component
Aug 26, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23312 HIGH
NVIDIA NeMo < 2.4.0 - Code Injection in Retrieval Services Component
Aug 26, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23307 HIGH
NVIDIA NeMo Curator < 25.07 - Code Injection via Malicious File
Aug 26, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23306 HIGH
NVIDIA Megatron-LM < 0.12.2 - Code Injection in megatron/training/arguments.py
Aug 13, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23305 HIGH
NVIDIA Megatron-LM < 0.12.2 - Code Injection in Tools Component
Aug 13, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23304 HIGH
NVIDIA NeMo < 2.3.2 - Remote Code Execution via Malicious .nemo File Metadata
Aug 13, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23303 HIGH
NVIDIA NeMo < 2.3.2 - Remote Code Execution via Untrusted Data Deserialization
Aug 13, 2025
CVSS 7.8
EPSS 0.02
CVE-2025-23298 HIGH
NVIDIA Merlin Transformers4Rec - Code Injection
Aug 13, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23296 HIGH
NVIDIA Isaac-GR00T - Code Injection
Aug 13, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23295 HIGH
NVIDIA Apex < 25.07 - Code Injection via Malicious File
Aug 13, 2025
CVSS 7.8
EPSS 0.00
CVE-2025-23294 HIGH
NVIDIA WebDataset - OS Command Injection
Aug 13, 2025
CVSS 7.8
EPSS 0.00