Vulnerabilities (CVE)

Filtered by vendor Paddlepaddle Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-52314 1 Paddlepaddle 1 Paddlepaddle 2024-01-05 N/A 9.8 CRITICAL
PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system.
CVE-2023-52311 1 Paddlepaddle 1 Paddlepaddle 2024-01-05 N/A 9.8 CRITICAL
PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system.
CVE-2023-52310 1 Paddlepaddle 1 Paddlepaddle 2024-01-05 N/A 9.8 CRITICAL
PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.
CVE-2023-52309 1 Paddlepaddle 1 Paddlepaddle 2024-01-05 N/A 9.8 CRITICAL
Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
CVE-2023-52307 1 Paddlepaddle 1 Paddlepaddle 2024-01-05 N/A 9.8 CRITICAL
Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
CVE-2023-52304 1 Paddlepaddle 1 Paddlepaddle 2024-01-05 N/A 9.8 CRITICAL
Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
CVE-2023-38673 1 Paddlepaddle 1 Paddlepaddle 2023-07-31 N/A 9.8 CRITICAL
PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system.
CVE-2023-38671 1 Paddlepaddle 1 Paddlepaddle 2023-07-31 N/A 9.8 CRITICAL
Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
CVE-2023-38669 1 Paddlepaddle 1 Paddlepaddle 2023-07-31 N/A 9.8 CRITICAL
Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.
CVE-2022-31523 1 Paddlepaddle 1 Anakin 2022-07-15 6.4 MEDIUM 9.3 CRITICAL
The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.