Export limit exceeded: 352167 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search

Search Results (100 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-33199 1 Nvidia 3 Dgx, Dgx Os, Dgx Spark 2025-12-02 3.2 Low
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior. A successful exploit of this vulnerability might lead to data tampering.
CVE-2025-33200 1 Nvidia 3 Dgx, Dgx Os, Dgx Spark 2025-12-02 2.3 Low
NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure.
CVE-2023-31031 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-10-09 4.2 Medium
NVIDIA DGX Station A100 and DGX Station A800 SBIOS contains a vulnerability where a user may cause a heap-based buffer overflow by local access. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and data tampering.
CVE-2023-31034 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-06-17 6.6 Medium
NVIDIA DGX A100 SBIOS contains a vulnerability where a local attacker can cause input validation checks to be bypassed by causing an integer overflow. A successful exploit of this vulnerability may lead to denial of service, information disclosure, and data tampering.
CVE-2023-31025 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-06-17 6.5 Medium
NVIDIA DGX A100 BMC contains a vulnerability where an attacker may cause an LDAP user injection. A successful exploit of this vulnerability may lead to information disclosure.
CVE-2023-31030 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-06-03 9.3 Critical
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause a stack overflow by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
CVE-2023-31024 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-06-03 9 Critical
NVIDIA DGX A100 BMC contains a vulnerability in the host KVM daemon, where an unauthenticated attacker may cause stack memory corruption by sending a specially crafted network packet. A successful exploit of this vulnerability may lead to arbitrary code execution, denial of service, information disclosure, and data tampering.
CVE-2023-31032 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-06-03 7.5 High
NVIDIA DGX A100 SBIOS contains a vulnerability where a user may cause a dynamic variable evaluation by local access. A successful exploit of this vulnerability may lead to denial of service.
CVE-2023-31033 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-06-03 6.8 Medium
NVIDIA DGX A100 BMC contains a vulnerability where a user may cause a missing authentication issue for a critical function by an adjacent network . A successful exploit of this vulnerability may lead to escalation of privileges, code execution, denial of service, information disclosure, and data tampering.
CVE-2022-42271 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-04-08 8.4 High
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution
CVE-2022-42272 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-04-07 8.1 High
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execution, denial of service or escalation of privileges.
CVE-2022-42273 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-04-07 8.1 High
NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution.
CVE-2022-42279 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-04-07 7.2 High
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure and data tampering.
CVE-2022-42280 1 Nvidia 2 Bmc, Dgx A100 2025-04-07 7.1 High
NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass.
CVE-2022-42281 1 Nvidia 2 Dgx A100, Dgx A100 Firmware 2025-04-07 6.7 Medium
NVIDIA DGX A100 contains a vulnerability in SBIOS in the FsRecovery, which may allow a highly privileged local attacker to cause an out-of-bounds write, which may lead to code execution, denial of service, compromised integrity, and information disclosure.
CVE-2022-42282 1 Nvidia 2 Bmc, Dgx A100 2025-04-07 6.5 Medium
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure.
CVE-2022-42283 1 Nvidia 2 Bmc, Dgx A100 2025-04-07 6.4 Medium
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution.
CVE-2022-42284 1 Nvidia 2 Bmc, Dgx A100 2025-04-07 6.2 Medium
NVIDIA BMC stores user passwords in an obfuscated form in a database accessible by the host. This may lead to a credentials exposure.
CVE-2022-42285 1 Nvidia 2 Dgx A100, Sbios 2025-04-07 6 Medium
DGX A100 SBIOS contains a vulnerability in the Pre-EFI Initialization (PEI)phase, where a privileged user can disable SPI flash protection, which may lead to denial of service, escalation of privileges, or data tampering.
CVE-2022-42286 1 Nvidia 2 Dgx A100, Sbios 2025-04-07 6 Medium
DGX A100 SBIOS contains a vulnerability in Bds, which may lead to code execution, denial of service, or escalation of privileges.