Browse CVEs

HIGH 7.5 CVE-2024-1603 paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file. Paddlepaddle No fix yet Fix from $1,9502024-03-23 CRITICAL 9.1 CVE-2024-0818 Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6 Paddlepaddle 2.6.0+ Fix from $2,3002024-03-07 CRITICAL 9.8 CVE-2024-0917 remote code execution in paddlepaddle/paddle 2.6.0 Paddlepaddle No fix yet Fix from $2,3002024-03-07 HIGH 8.8 CVE-2024-0815 Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0 Paddlepaddle No fix yet Fix from $1,9502024-03-07 HIGH 7.8 CVE-2024-0817 Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0 Paddlepaddle No fix yet Fix from $1,9502024-03-07 HIGH 7.8 CVE-2024-0521 Code Injection in paddlepaddle/paddle Paddle Patch available Fix from $1,9502024-01-20 CRITICAL 9.8 CVE-2023-52314 PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operati… Paddlepaddle 2.6.0+ Fix from $2,3002024-01-03 HIGH 7.5 CVE-2023-52313 FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 CRITICAL 9.8 CVE-2023-52309 Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or … Paddlepaddle 2.6.0+ Fix from $2,3002024-01-03 CRITICAL 9.8 CVE-2023-52310 PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the oper… Paddlepaddle 2.6.0+ Fix from $2,3002024-01-03 CRITICAL 9.8 CVE-2023-52311 PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating syst… Paddlepaddle 2.6.0+ Fix from $2,3002024-01-03 HIGH 7.5 CVE-2023-52308 FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-52312 Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle after 2.6.0 Fix from $1,9502024-01-03 CRITICAL 9.8 CVE-2023-52304 Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. Paddlepaddle 2.6.0+ Fix from $2,3002024-01-03 CRITICAL 9.8 CVE-2023-52307 Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. Paddlepaddle 2.6.0+ Fix from $2,3002024-01-03 HIGH 7.5 CVE-2023-52302 Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-52303 Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-52305 FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-52306 FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-38674 FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-38675 FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-38676 Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-38677 FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 HIGH 7.5 CVE-2023-38678 OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.6.0+ Fix from $1,9502024-01-03 CRITICAL 9.8 CVE-2023-38673 PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system. Paddlepaddle 2.5.0+ Fix from $2,3002023-07-26 HIGH 7.5 CVE-2023-38672 FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service. Paddlepaddle 2.5.0+ Fix from $1,9502023-07-26 CRITICAL 9.8 CVE-2023-38671 Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage … Paddlepaddle 2.5.0+ Fix from $2,3002023-07-26 HIGH 7.5 CVE-2023-38670 Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service. Paddlepaddle 2.5.0+ Fix from $1,9502023-07-26 CRITICAL 9.8 CVE-2023-38669 Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition. Paddlepaddle 2.5.0+ Fix from $2,3002023-07-26 CRITICAL 9.8 CVE-2022-46742 Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution. Paddlepaddle Patch available Fix from $2,3002022-12-07