nvidia Vulnerability Advisory Catalog

Total 777 security vulnerabilities recorded for nvidia software and firmware.

← Back to All Vendors
Component: dgx_a100_firmware

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executio...

📅 2023-01-13
CVSS 7.2 Dossier →
Component: dgx_a100_firmware

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executio...

📅 2023-01-13
CVSS 7.2 Dossier →
Component: dgx_a100_firmware

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may l...

📅 2023-01-13
CVSS 5.3 Dossier →
Component: bmc

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances,...

📅 2023-01-13
CVSS 6.0 Dossier →
Component: sbios

DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges....

📅 2023-01-13
CVSS 6.0 Dossier →
Component: sbios

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may ...

📅 2023-01-13
CVSS 6.0 Dossier →
Component: bmc

NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure....

📅 2023-01-13
CVSS 6.2 Dossier →
Component: bmc

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain co...

📅 2023-01-13
CVSS 6.4 Dossier →
Component: bmc

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure...

📅 2023-01-13
CVSS 6.5 Dossier →
Component: dgx_a100_firmware

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds writ...

📅 2023-01-13
CVSS 6.7 Dossier →
Component: bmc

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authenti...

📅 2023-01-13
CVSS 7.1 Dossier →
Component: dgx_a100_firmware

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executio...

📅 2023-01-13
CVSS 7.2 Dossier →
Component: bmc

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context ...

📅 2023-01-13
CVSS 7.2 Dossier →
Component: dgx_station_a100_firmware

NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, whi...

📅 2023-01-13
CVSS 7.5 Dossier →
Component: dgx_a100_firmware

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which ...

📅 2023-01-13
CVSS 7.5 Dossier →
Component: bmc

NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of integ...

📅 2023-01-13
CVSS 7.7 Dossier →
Component: bmc

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain co...

📅 2023-01-13
CVSS 7.8 Dossier →
Component: dgx_a100_firmware

NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain co...

📅 2023-01-12
CVSS 8.1 Dossier →
Component: dgx_a100_firmware

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denia...

📅 2023-01-12
CVSS 8.1 Dossier →
Component: dgx_a100_firmware

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain co...

📅 2023-01-11
CVSS 8.4 Dossier →
Component: jetson_linux

NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause stack-base...

📅 2022-12-30
CVSS 7.8 Dossier →
Component: jetson_linux

NVIDIA Trusted OS contains a vulnerability in an SMC call handler, where failure to validate untrusted input may allow a highly privileged local attac...

📅 2022-12-30
CVSS 7.9 Dossier →
Component: virtual_gpu

NVIDIA GPU Display Driver for Windows contains a vulnerability where a regular user can cause an out-of-bounds read, which may lead to code execution,...

📅 2022-12-30
CVSS 7.0 Dossier →
Component: virtual_gpu

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape, where an unprivilege...

📅 2022-12-30
CVSS 5.5 Dossier →
Page 15 of 33 (777 Total Records)