CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/07/2023 |
| CVE-2023-38672 | 높음7.5 | FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.
| 26/07/2023 |
| CVE-2023-38671 | 심각9.8 | Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
| 26/07/2023 |
| CVE-2023-38670 | 높음7.5 | Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.
| 26/07/2023 |
| CVE-2023-38669 | 심각9.8 | Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.
| 26/07/2023 |
| CVE-2022-46742 | 심각9.8 | Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.
| 07/12/2022 |
| CVE-2022-46741 | 심각9.1 | Out-of-bounds read in gather_tree in PaddlePaddle before 2.4. | 07/12/2022 |
| CVE-2022-45908 | 심각9.8 | In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution. | 26/11/2022 |