PaddlePaddle records
33 published records for vendor paddlepaddle.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 7
- With a fix record
- 87.9%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-369 Divide By Zero8
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5
- CWE-476 NULL Pointer Dereference5
- CWE-94 Improper Control of Generation of Code ('Code Injection')4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
The weakness classes this vendor ships most often: where to look.
CWEAll records
33 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2023-38673No exploit | Command injection in fs.pypaddlepaddle · paddlepaddle · CWE-78 | Critical9.8 | — | 2.3% | Jul 26, 2023 |
39Monitor | CVE-2024-0917No exploit | remote code execution in paddlepaddle/paddle 2.6.0paddlepaddle · paddlepaddle · CWE-94 | Critical9.8 | — | 1.6% | Mar 7, 2024 |
39Monitor | CVE-2022-45908No exploit | In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winspaddlepaddle · paddlepaddle · CWE-94 | Critical9.8 | — | 1.4% | Nov 25, 2022 |
39Monitor | CVE-2022-46742No exploit | Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.paddlepaddle · paddlepaddle · CWE-94 | Critical9.8 | — | 1.1% | Dec 7, 2022 |
39Monitor | CVE-2023-52314No exploit | Command injection in convert_shape_comparepaddlepaddle · paddlepaddle · CWE-78 | Critical9.8 | — | 1.1% | Jan 3, 2024 |
39Monitor | CVE-2023-52310No exploit | Command injection in get_online_pass_intervalpaddlepaddle · paddlepaddle · CWE-78 | Critical9.8 | — | 1.1% | Jan 3, 2024 |
39Monitor | CVE-2023-52311No exploit | Command injection in _wget_downloadpaddlepaddle · paddlepaddle · CWE-78 | Critical9.8 | — | 1.1% | Jan 3, 2024 |
39Monitor | CVE-2023-38669No exploit | Use after free in paddle.diagonal in PaddlePaddle before 2.5.0.paddlepaddle · paddlepaddle · CWE-416 | Critical9.8 | — | 0.7% | Jul 26, 2023 |
39Monitor | CVE-2023-38671No exploit | Heap buffer overflow in paddle.tracepaddlepaddle · paddlepaddle · CWE-120 | Critical9.8 | — | 0.7% | Jul 26, 2023 |
39Monitor | CVE-2023-52304No exploit | Stack overflow in paddle.searchsortedpaddlepaddle · paddlepaddle · CWE-120 | Critical9.8 | — | 0.5% | Jan 3, 2024 |
39Monitor | CVE-2023-52309No exploit | Heap buffer overflow in paddle.repeat_interleavepaddlepaddle · paddlepaddle · CWE-120 | Critical9.8 | — | 0.5% | Jan 3, 2024 |
39Monitor | CVE-2023-52307No exploit | Stack overflow in paddle.linalg.lu_unpackpaddlepaddle · paddlepaddle · CWE-120 | Critical9.8 | — | 0.5% | Jan 3, 2024 |
37Monitor | CVE-2022-31523No exploit | The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafpaddlepaddle · anakin · CWE-22 | Critical9.3 | — | 1.3% | Jul 10, 2022 |
36Monitor | CVE-2024-0818No exploit | Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6paddlepaddle · paddlepaddle · CWE-22 | Critical9.1 | — | 1.0% | Mar 7, 2024 |
36Monitor | CVE-2022-46741No exploit | Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.paddlepaddle · paddlepaddle · CWE-125 | Critical9.1 | — | 0.7% | Dec 7, 2022 |
35Monitor | CVE-2024-0815No exploit | Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0paddlepaddle · paddlepaddle · CWE-78 | High8.8 | — | 1.1% | Mar 7, 2024 |
31Monitor | CVE-2024-0817No exploit | Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0paddlepaddle · paddlepaddle · CWE-77 | High7.8 | — | 1.1% | Mar 6, 2024 |
31Monitor | CVE-2024-0521No exploit | Code Injection in paddlepaddle/paddlepaddlepaddle · paddle · CWE-94 | High7.8 | — | 0.4% | Jan 20, 2024 |
30Monitor | CVE-2023-38672No exploit | FPE in paddle.linalg.matrix_powerpaddlepaddle · paddlepaddle · CWE-369 | High7.5 | — | 0.7% | Jul 26, 2023 |
30Monitor | CVE-2023-38670No exploit | Null pointer dereference in paddle.flippaddlepaddle · paddlepaddle · CWE-476 | High7.5 | — | 0.6% | Jul 26, 2023 |
30Monitor | CVE-2024-1603No exploit | paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.paddlepaddle · paddlepaddle · CWE-73 | High7.5 | — | 0.5% | Mar 23, 2024 |
30Monitor | CVE-2023-52302No exploit | Segfault in paddle.nextafterpaddlepaddle · paddlepaddle · CWE-476 | High7.5 | — | 0.5% | Jan 3, 2024 |
30Monitor | CVE-2023-38674No exploit | FPE in paddle.nanmedianpaddlepaddle · paddlepaddle · CWE-369 | High7.5 | — | 0.4% | Jan 3, 2024 |
30Monitor | CVE-2023-52308No exploit | FPE in paddle.amin in PaddlePaddle before 2.6.0.paddlepaddle · paddlepaddle · CWE-369 | High7.5 | — | 0.4% | Jan 3, 2024 |
30Monitor | CVE-2023-52312No exploit | Null pointer dereference in paddle.croppaddlepaddle · paddlepaddle · CWE-476 | High7.5 | — | 0.4% | Jan 3, 2024 |
- CVE-2023-3867340Plan
Command injection in fs.py
CriticalCVSS 9.8No exploitEPSS 2%paddlepaddle · paddlepaddleJul 26, 2023
- CVE-2024-091739Monitor
remote code execution in paddlepaddle/paddle 2.6.0
CriticalCVSS 9.8No exploitEPSS 1%paddlepaddle · paddlepaddleMar 7, 2024
- CVE-2022-4590839Monitor
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied wins
CriticalCVSS 9.8No exploitEPSS 1%paddlepaddle · paddlepaddleNov 25, 2022
- CVE-2022-4674239Monitor
Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.
CriticalCVSS 9.8No exploitEPSS 1%paddlepaddle · paddlepaddleDec 7, 2022
- CVE-2023-5231439Monitor
Command injection in convert_shape_compare
CriticalCVSS 9.8No exploitEPSS 1%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2023-5231039Monitor
Command injection in get_online_pass_interval
CriticalCVSS 9.8No exploitEPSS 1%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2023-5231139Monitor
Command injection in _wget_download
CriticalCVSS 9.8No exploitEPSS 1%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2023-3866939Monitor
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0.
CriticalCVSS 9.8No exploitEPSS 0%paddlepaddle · paddlepaddleJul 26, 2023
- CVE-2023-3867139Monitor
Heap buffer overflow in paddle.trace
CriticalCVSS 9.8No exploitEPSS 0%paddlepaddle · paddlepaddleJul 26, 2023
- CVE-2023-5230439Monitor
Stack overflow in paddle.searchsorted
CriticalCVSS 9.8No exploitEPSS 0%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2023-5230939Monitor
Heap buffer overflow in paddle.repeat_interleave
CriticalCVSS 9.8No exploitEPSS 0%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2023-5230739Monitor
Stack overflow in paddle.linalg.lu_unpack
CriticalCVSS 9.8No exploitEPSS 0%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2022-3152337Monitor
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsaf
CriticalCVSS 9.3No exploitEPSS 1%paddlepaddle · anakinJul 10, 2022
- CVE-2024-081836Monitor
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6
CriticalCVSS 9.1No exploitEPSS 1%paddlepaddle · paddlepaddleMar 7, 2024
- CVE-2022-4674136Monitor
Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.
CriticalCVSS 9.1No exploitEPSS 0%paddlepaddle · paddlepaddleDec 7, 2022
- CVE-2024-081535Monitor
Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0
HighCVSS 8.8No exploitEPSS 1%paddlepaddle · paddlepaddleMar 7, 2024
- CVE-2024-081731Monitor
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0
HighCVSS 7.8No exploitEPSS 1%paddlepaddle · paddlepaddleMar 6, 2024
- CVE-2024-052131Monitor
Code Injection in paddlepaddle/paddle
HighCVSS 7.8No exploitEPSS 0%paddlepaddle · paddleJan 20, 2024
- CVE-2023-3867230Monitor
FPE in paddle.linalg.matrix_power
HighCVSS 7.5No exploitEPSS 0%paddlepaddle · paddlepaddleJul 26, 2023
- CVE-2023-3867030Monitor
Null pointer dereference in paddle.flip
HighCVSS 7.5No exploitEPSS 0%paddlepaddle · paddlepaddleJul 26, 2023
- CVE-2024-160330Monitor
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.
HighCVSS 7.5No exploitEPSS 0%paddlepaddle · paddlepaddleMar 23, 2024
- CVE-2023-5230230Monitor
Segfault in paddle.nextafter
HighCVSS 7.5No exploitEPSS 0%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2023-3867430Monitor
FPE in paddle.nanmedian
HighCVSS 7.5No exploitEPSS 0%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2023-5230830Monitor
FPE in paddle.amin in PaddlePaddle before 2.6.0.
HighCVSS 7.5No exploitEPSS 0%paddlepaddle · paddlepaddleJan 3, 2024
- CVE-2023-5231230Monitor
Null pointer dereference in paddle.crop
HighCVSS 7.5No exploitEPSS 0%paddlepaddle · paddlepaddleJan 3, 2024