Vulnerability index

Browse CVEs

725 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Virtual Gpu MEDIUM 5.5
CVE-2023-0188

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer handler, where an unprivileged user can cause impro…

Fix: 11.12 / 13.7+
Fix from $1,600 2023-04-01
Virtual Gpu HIGH 7.8
CVE-2023-0182

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service, …

Fix: 11.12 / 13.7+
Fix from $1,950 2023-04-01
Virtual Gpu HIGH 7.1
CVE-2023-0180

NVIDIA GPU Display Driver for Linux contains a vulnerability in a kernel mode layer handler, which may lead to denial of service or information discl…

Fix: 11.12 / 13.7+
Fix from $1,950 2023-04-01
Virtual Gpu HIGH 7.1
CVE-2023-0181

NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in a kernel mode layer handler, where memory permissions are not correctly c…

Fix: 11.12 / 13.7+
Fix from $1,950 2023-04-01
Virtual Gpu HIGH 7.1
CVE-2023-0183

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an out-of-bounds write can lead to denial of service and …

Fix: 11.12 / 13.7+
Fix from $1,950 2023-04-01
Virtual Gpu HIGH 7.1
CVE-2023-0185

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where sign conversion issuescasting an unsigned primitive to s…

Fix: 11.12 / 13.7+
Fix from $1,950 2023-04-01
Virtual Gpu HIGH 7.1
CVE-2023-0186

NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer, where an out-of-bounds write can lead to denial of service a…

Fix: 11.12 / 13.7+
Fix from $1,950 2023-04-01
Data Center Gpu Manager HIGH 7.1
CVE-2023-0208

NVIDIA DCGM for Linux contains a vulnerability in HostEngine (server component) where a user may cause a heap-based buffer overflow through the bound…

Fix: 3.1.7+
Fix from $1,950 2023-04-01
Geforce Experience HIGH 7.8
CVE-2022-42292

NVIDIA GeForce Experience contains a vulnerability in the NVContainer component, where a user without administrator privileges can create a symbolic …

Fix: 3.27.0.112+
Fix from $1,950 2023-02-12
Geforce Experience HIGH 7.3
CVE-2022-31611

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileg…

Fix: 3.27.0.112+
Fix from $1,950 2023-02-07
Geforce Experience MEDIUM 5.5
CVE-2022-42291

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently…

Fix: 3.27.0.112+
Fix from $1,600 2023-02-07
Nvidia Isaac Sim HIGH 7.8
CVE-2022-42268

Omniverse Kit contains a vulnerability in the reference applications Create, Audio2Face, Isaac Sim, View, Code, and Machinima. These applications all…

Fix: 2022.2 / 2022.2.0+
Fix from $1,950 2023-01-13
Dgx A100 Firmware HIGH 8.8
CVE-2022-42289

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executi…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Dgx A100 Firmware HIGH 8.8
CVE-2022-42290

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executi…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Sbios HIGH 7.8
CVE-2022-42286

DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges.

Fix: 1.18+
Fix from $1,950 2023-01-13
Bmc HIGH 7.8
CVE-2022-42287

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can upload and download arbitrary files under certain circumstances…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Dgx A100 Firmware MEDIUM 5.3
CVE-2022-42288

NVIDIA BMC contains a vulnerability in IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid BMC username, which may …

Fix: 00.19.07+
Fix from $1,600 2023-01-13
Dgx A100 Firmware HIGH 8.8
CVE-2022-42279

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code executi…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Bmc HIGH 7.8
CVE-2022-42278

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memory context…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Bmc HIGH 7.8
CVE-2022-42280

NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authent…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Bmc HIGH 7.8
CVE-2022-42283

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain c…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Sbios HIGH 7.8
CVE-2022-42285

DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may…

Fix: 1.18+
Fix from $1,950 2023-01-13
Dgx A100 Firmware MEDIUM 6.7
CVE-2022-42281

NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds wri…

Fix: 1.18+
Fix from $1,600 2023-01-13
Bmc MEDIUM 5.5
CVE-2022-42282

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosur…

Fix: 00.19.07+
Fix from $1,600 2023-01-13
Bmc MEDIUM 5.5
CVE-2022-42284

NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure.

Fix: 00.19.07+
Fix from $1,600 2023-01-13
Dgx A100 Firmware HIGH 8.2
CVE-2022-42276

NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, which…

Fix: 1.18+
Fix from $1,950 2023-01-13
Dgx Station A100 Firmware HIGH 8.2
CVE-2022-42277

NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase flash, wh…

Fix: 10.16+
Fix from $1,950 2023-01-13
Bmc HIGH 7.8
CVE-2022-42274

NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain c…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Bmc HIGH 7.1
CVE-2022-42275

NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a loss of inte…

Fix: 00.19.07+
Fix from $1,950 2023-01-13
Dgx A100 Firmware HIGH 8.8
CVE-2022-42273

NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain c…

Fix: 00.19.07+
Fix from $1,950 2023-01-12