CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/07/2023 |
| CVE-2023-38672 | HIGH7.5 | FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.
| 26/07/2023 |
| CVE-2023-38671 | CRITICAL9.8 | Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
| 26/07/2023 |
| CVE-2023-38670 | HIGH7.5 | Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.
| 26/07/2023 |
| CVE-2023-38669 | CRITICAL9.8 | Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.
| 26/07/2023 |
| CVE-2022-46742 | CRITICAL9.8 | Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.
| 07/12/2022 |
| CVE-2022-46741 | CRITICAL9.1 | Out-of-bounds read in gather_tree in PaddlePaddle before 2.4. | 07/12/2022 |
| CVE-2022-45908 | CRITICAL9.8 | In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution. | 26/11/2022 |