PaddlePaddle kayıtları
paddlepaddle üreticisine ait 33 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 7
- Düzeltme kaydı olan
- %87,9
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-369 Divide By Zero8
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')5
- CWE-476 NULL Pointer Dereference5
- CWE-94 Improper Control of Generation of Code ('Code Injection')4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')4
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
33 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2023-38673İstismar yok | Command injection in fs.pypaddlepaddle · paddlepaddle · CWE-78 | Kritik9,8 | — | %2,3 | 26 Tem 2023 |
39İzleyin | CVE-2024-0917İstismar yok | remote code execution in paddlepaddle/paddle 2.6.0paddlepaddle · paddlepaddle · CWE-94 | Kritik9,8 | — | %1,7 | 7 Mar 2024 |
39İzleyin | CVE-2022-45908İstismar yok | In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winspaddlepaddle · paddlepaddle · CWE-94 | Kritik9,8 | — | %1,4 | 25 Kas 2022 |
39İzleyin | CVE-2022-46742İstismar yok | Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.paddlepaddle · paddlepaddle · CWE-94 | Kritik9,8 | — | %1,2 | 7 Ara 2022 |
39İzleyin | CVE-2023-52310İstismar yok | Command injection in get_online_pass_intervalpaddlepaddle · paddlepaddle · CWE-78 | Kritik9,8 | — | %1,2 | 3 Oca 2024 |
39İzleyin | CVE-2023-52314İstismar yok | Command injection in convert_shape_comparepaddlepaddle · paddlepaddle · CWE-78 | Kritik9,8 | — | %1,2 | 3 Oca 2024 |
39İzleyin | CVE-2023-52311İstismar yok | Command injection in _wget_downloadpaddlepaddle · paddlepaddle · CWE-78 | Kritik9,8 | — | %1,2 | 3 Oca 2024 |
39İzleyin | CVE-2023-38669İstismar yok | Use after free in paddle.diagonal in PaddlePaddle before 2.5.0.paddlepaddle · paddlepaddle · CWE-416 | Kritik9,8 | — | %0,8 | 26 Tem 2023 |
39İzleyin | CVE-2023-38671İstismar yok | Heap buffer overflow in paddle.tracepaddlepaddle · paddlepaddle · CWE-120 | Kritik9,8 | — | %0,8 | 26 Tem 2023 |
39İzleyin | CVE-2023-52304İstismar yok | Stack overflow in paddle.searchsortedpaddlepaddle · paddlepaddle · CWE-120 | Kritik9,8 | — | %0,6 | 3 Oca 2024 |
39İzleyin | CVE-2023-52309İstismar yok | Heap buffer overflow in paddle.repeat_interleavepaddlepaddle · paddlepaddle · CWE-120 | Kritik9,8 | — | %0,5 | 3 Oca 2024 |
39İzleyin | CVE-2023-52307İstismar yok | Stack overflow in paddle.linalg.lu_unpackpaddlepaddle · paddlepaddle · CWE-120 | Kritik9,8 | — | %0,5 | 3 Oca 2024 |
37İzleyin | CVE-2022-31523İstismar yok | The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafpaddlepaddle · anakin · CWE-22 | Kritik9,3 | — | %1,3 | 10 Tem 2022 |
36İzleyin | CVE-2024-0818İstismar yok | Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6paddlepaddle · paddlepaddle · CWE-22 | Kritik9,1 | — | %1,1 | 7 Mar 2024 |
36İzleyin | CVE-2022-46741İstismar yok | Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.paddlepaddle · paddlepaddle · CWE-125 | Kritik9,1 | — | %0,7 | 7 Ara 2022 |
35İzleyin | CVE-2024-0815İstismar yok | Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0paddlepaddle · paddlepaddle · CWE-78 | Yüksek8,8 | — | %1,1 | 7 Mar 2024 |
31İzleyin | CVE-2024-0817İstismar yok | Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0paddlepaddle · paddlepaddle · CWE-77 | Yüksek7,8 | — | %1,2 | 6 Mar 2024 |
31İzleyin | CVE-2024-0521İstismar yok | Code Injection in paddlepaddle/paddlepaddlepaddle · paddle · CWE-94 | Yüksek7,8 | — | %0,5 | 20 Oca 2024 |
30İzleyin | CVE-2023-38672İstismar yok | FPE in paddle.linalg.matrix_powerpaddlepaddle · paddlepaddle · CWE-369 | Yüksek7,5 | — | %0,7 | 26 Tem 2023 |
30İzleyin | CVE-2023-38670İstismar yok | Null pointer dereference in paddle.flippaddlepaddle · paddlepaddle · CWE-476 | Yüksek7,5 | — | %0,7 | 26 Tem 2023 |
30İzleyin | CVE-2024-1603İstismar yok | paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.paddlepaddle · paddlepaddle · CWE-73 | Yüksek7,5 | — | %0,6 | 23 Mar 2024 |
30İzleyin | CVE-2023-52302İstismar yok | Segfault in paddle.nextafterpaddlepaddle · paddlepaddle · CWE-476 | Yüksek7,5 | — | %0,5 | 3 Oca 2024 |
30İzleyin | CVE-2023-38674İstismar yok | FPE in paddle.nanmedianpaddlepaddle · paddlepaddle · CWE-369 | Yüksek7,5 | — | %0,5 | 3 Oca 2024 |
30İzleyin | CVE-2023-52308İstismar yok | FPE in paddle.amin in PaddlePaddle before 2.6.0.paddlepaddle · paddlepaddle · CWE-369 | Yüksek7,5 | — | %0,5 | 3 Oca 2024 |
30İzleyin | CVE-2023-52312İstismar yok | Null pointer dereference in paddle.croppaddlepaddle · paddlepaddle · CWE-476 | Yüksek7,5 | — | %0,5 | 3 Oca 2024 |
- CVE-2023-3867340Planlayın
Command injection in fs.py
KritikCVSS 9,8İstismar yokEPSS %2paddlepaddle · paddlepaddle26 Tem 2023
- CVE-2024-091739İzleyin
remote code execution in paddlepaddle/paddle 2.6.0
KritikCVSS 9,8İstismar yokEPSS %2paddlepaddle · paddlepaddle7 Mar 2024
- CVE-2022-4590839İzleyin
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied wins
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle25 Kas 2022
- CVE-2022-4674239İzleyin
Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle7 Ara 2022
- CVE-2023-5231039İzleyin
Command injection in get_online_pass_interval
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2023-5231439İzleyin
Command injection in convert_shape_compare
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2023-5231139İzleyin
Command injection in _wget_download
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2023-3866939İzleyin
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0.
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle26 Tem 2023
- CVE-2023-3867139İzleyin
Heap buffer overflow in paddle.trace
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle26 Tem 2023
- CVE-2023-5230439İzleyin
Stack overflow in paddle.searchsorted
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2023-5230939İzleyin
Heap buffer overflow in paddle.repeat_interleave
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2023-5230739İzleyin
Stack overflow in paddle.linalg.lu_unpack
KritikCVSS 9,8İstismar yokEPSS %1paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2022-3152337İzleyin
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsaf
KritikCVSS 9,3İstismar yokEPSS %1paddlepaddle · anakin10 Tem 2022
- CVE-2024-081836İzleyin
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6
KritikCVSS 9,1İstismar yokEPSS %1paddlepaddle · paddlepaddle7 Mar 2024
- CVE-2022-4674136İzleyin
Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.
KritikCVSS 9,1İstismar yokEPSS %1paddlepaddle · paddlepaddle7 Ara 2022
- CVE-2024-081535İzleyin
Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0
YüksekCVSS 8,8İstismar yokEPSS %1paddlepaddle · paddlepaddle7 Mar 2024
- CVE-2024-081731İzleyin
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0
YüksekCVSS 7,8İstismar yokEPSS %1paddlepaddle · paddlepaddle6 Mar 2024
- CVE-2024-052131İzleyin
Code Injection in paddlepaddle/paddle
YüksekCVSS 7,8İstismar yokEPSS %0paddlepaddle · paddle20 Oca 2024
- CVE-2023-3867230İzleyin
FPE in paddle.linalg.matrix_power
YüksekCVSS 7,5İstismar yokEPSS %1paddlepaddle · paddlepaddle26 Tem 2023
- CVE-2023-3867030İzleyin
Null pointer dereference in paddle.flip
YüksekCVSS 7,5İstismar yokEPSS %1paddlepaddle · paddlepaddle26 Tem 2023
- CVE-2024-160330İzleyin
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.
YüksekCVSS 7,5İstismar yokEPSS %1paddlepaddle · paddlepaddle23 Mar 2024
- CVE-2023-5230230İzleyin
Segfault in paddle.nextafter
YüksekCVSS 7,5İstismar yokEPSS %1paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2023-3867430İzleyin
FPE in paddle.nanmedian
YüksekCVSS 7,5İstismar yokEPSS %0paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2023-5230830İzleyin
FPE in paddle.amin in PaddlePaddle before 2.6.0.
YüksekCVSS 7,5İstismar yokEPSS %0paddlepaddle · paddlepaddle3 Oca 2024
- CVE-2023-5231230İzleyin
Null pointer dereference in paddle.crop
YüksekCVSS 7,5İstismar yokEPSS %0paddlepaddle · paddlepaddle3 Oca 2024