Known Vulnerabilities
CVE-2024-1603
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file.
HIGH
CVSS 8.2
Published Mar 23, 2024
CVE-2024-0818
Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6
CRITICAL
CVSS 9.1
Published Mar 07, 2024
CVE-2024-0917
remote code execution in paddlepaddle/paddle 2.6.0
CRITICAL
CVSS 9.4
Published Mar 07, 2024
CVE-2024-0815
Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0
CRITICAL
CVSS 9.3
Published Mar 07, 2024
CVE-2024-0817
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0
CRITICAL
CVSS 9.3
Published Mar 07, 2024
CVE-2024-0521
Code Injection in paddlepaddle/paddle
CRITICAL
CVSS 9.3
Published Jan 20, 2024