cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score
CVE-2022-28199,https://securityvulnerability.io/vulnerability/CVE-2022-28199,Network Stack Vulnerability in NVIDIA Data Plane Development Kit,"NVIDIA's Data Plane Development Kit has a vulnerability in its network stack that inadequately handles error recovery. This flaw can be exploited by a remote attacker, leading to potential denial of service. Additionally, this vulnerability poses some risk to data integrity and confidentiality, making it critical for users to address this issue promptly.",Nvidia,Nvidia Flare,6.5,MEDIUM,0.0005799999926239252,false,,false,false,false,,,false,false,,2022-09-01T16:20:10.000Z,0
CVE-2022-34668,https://securityvulnerability.io/vulnerability/CVE-2022-34668,Remote Code Execution Vulnerability in NVFLARE by NVIDIA,"NVIDIA's NVFLARE prior to version 2.1.4 is susceptible to a vulnerability that stems from unsafe deserialization practices involving the Pickle module. This flaw allows an unprivileged network attacker to exploit the system, potentially leading to remote code execution or denial of service. The breach may compromise the confidentiality and integrity of sensitive data, posing severe risks to affected users.",Nvidia,Nvidia Flare,9.8,CRITICAL,0.003109999932348728,false,,false,false,false,,,false,false,,2022-08-29T00:00:00.000Z,0
CVE-2022-31605,https://securityvulnerability.io/vulnerability/CVE-2022-31605,Deserialization Flaw in NVFLARE by NVIDIA,"The NVFLARE product by NVIDIA, prior to version 2.1.2, features a vulnerability in its utils module. This flaw arises from the use of yaml.load() instead of the safer yaml.safe_load() for loading YAML files. An unprivileged network attacker can exploit this weakness, potentially resulting in remote code execution, denial of service, and detrimental impacts on data confidentiality and integrity.",Nvidia,Nvidia Flare,9.8,CRITICAL,0.0004900000058114529,false,,false,false,false,,,false,false,,2022-07-01T17:15:22.000Z,0
CVE-2022-31604,https://securityvulnerability.io/vulnerability/CVE-2022-31604,Security Flaw in NVFLARE's PKI Module by NVIDIA,"NVFLARE, developed by NVIDIA, has a vulnerability in its PKI implementation module affecting versions prior to 2.1.2. The flaw arises from the insecure handling of CA credentials, which are serialized using Python's pickle module. This mechanism lacks proper safe deserialization, allowing an unprivileged network attacker to exploit the system. Successful exploitation can lead to remote code execution, resulting in denial of service and potentially compromising the confidentiality and integrity of sensitive data.",Nvidia,Nvidia Flare,9.8,CRITICAL,0.0004900000058114529,false,,false,false,false,,,false,false,,2022-07-01T17:15:21.000Z,0
CVE-2022-21822,https://securityvulnerability.io/vulnerability/CVE-2022-21822,Resource Management Vulnerability in NVIDIA FLARE Admin Interface,"NVIDIA FLARE has a vulnerability in its admin interface that permits unauthorized attackers to allocate resources without any constraints or throttling. This lack of control can lead to a potential denial of service, rendering the system unavailable for legitimate users.",Nvidia,Nvidia Flare,7.5,HIGH,0.0004400000034365803,false,,false,false,false,,,false,false,,2022-03-17T20:30:13.000Z,0