CVE-2025-23251
- EPSS 0.14%
- Veröffentlicht 22.04.2025 15:42:03
- Zuletzt bearbeitet 24.09.2025 14:49:20
NVIDIA NeMo Framework contains a vulnerability where a user could cause an improper control of generation of code by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.
CVE-2025-23250
- EPSS 0.08%
- Veröffentlicht 22.04.2025 15:35:29
- Zuletzt bearbeitet 24.09.2025 14:51:30
NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data t...
CVE-2025-23249
- EPSS 0.8%
- Veröffentlicht 22.04.2025 15:30:16
- Zuletzt bearbeitet 24.09.2025 14:55:11
NVIDIA NeMo Framework contains a vulnerability where a user could cause a deserialization of untrusted data by remote code execution. A successful exploit of this vulnerability might lead to code execution and data tampering.
CVE-2025-23360
- EPSS 0.13%
- Veröffentlicht 11.03.2025 19:44:39
- Zuletzt bearbeitet 23.09.2025 19:12:03
NVIDIA Nemo Framework contains a vulnerability where a user could cause a relative path traversal issue by arbitrary file write. A successful exploit of this vulnerability may lead to code execution and data tampering.
CVE-2024-0129
- EPSS 0.08%
- Veröffentlicht 15.10.2024 06:15:02
- Zuletzt bearbeitet 08.11.2024 15:33:26
NVIDIA NeMo contains a vulnerability in SaveRestoreConnector where a user may cause a path traversal issue via an unsafe .tar file extraction. A successful exploit of this vulnerability may lead to code execution and data tampering.
CVE-2024-0081
- EPSS 0.09%
- Veröffentlicht 05.04.2024 19:15:07
- Zuletzt bearbeitet 10.10.2025 17:47:35
NVIDIA NeMo framework for Ubuntu contains a vulnerability in tools/asr_webapp where an attacker may cause an allocation of resources without limits or throttling. A successful exploit of this vulnerability may lead to a server-side denial of service...
CVE-2022-22821
- EPSS 0.15%
- Veröffentlicht 10.01.2022 14:12:55
- Zuletzt bearbeitet 21.11.2024 06:47:31
NVIDIA NeMo before 1.6.0 contains a vulnerability in ASR WebApp, in which ../ Path Traversal may lead to deletion of any directory when admin privileges are available.