PT-2024-24585 · Unknown · Wappointment

Name of the Vulnerable Software and Affected Versions: Wappointment Appointment Bookings for Zoom GoogleMeet and more – Wappointment versions n/a through 2.6.0 Description: The issue is a Server-Side Request Forgery SSRF vulnerability. This means that an attacker could potentially force the serve...

CVE-2023-29483

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

CVE-2024-1603 confirmed

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

PT-2024-18164

Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle version 2.6.0 Description The issue allows for arbitrary file read via the paddle.vision.ops.read file function. Recommendations For paddlepaddle/paddle version 2.6.0, consider restricting access to the read file function...

CVE-2022-34321 Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about live connections, along with the capability to modify the logging level of proxied connections...

paddlepaddle code injection vulnerability

PaddlePaddle PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle PaddlePaddle. A code injection vulnerability exists in paddlepaddle version 2.6.0, which stems from the application failing to properly filter special elements of constructed code segments...

CVE-2024-0917

remote code execution in paddlepaddle/paddle 2.6.0...

Remote code execution

remote code execution in paddlepaddle/paddle 2.6.0...

CVE-2024-0917

remote code execution in paddlepaddle/paddle 2.6.0...

CVE-2024-0917

remote code execution in paddlepaddle/paddle 2.6.0...

GHSA-QQV2-35Q8-P2G2 PaddlePaddle command injection in paddle.utils.download._wget_download

Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...

CVE-2024-0815

Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...

PaddlePaddle command injection vulnerability

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...

CVE-2024-0815

Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...

Command injection

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...

CVE-2024-0817

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...

CVE-2024-0817

Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...

PT-2024-15835

Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle version 2.6.0 Description The issue concerns a command injection in the paddle.utils.download. wget download function, which allows bypassing a filter. Recommendations For paddlepaddle/paddle version 2.6.0, at the moment,...

Fedora 39 : python3.6 (2024-8732282e7b)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-8732282e7b advisory. Fix tests for XMLPullParser with Expat 2.6.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Ness...