498 matches found
GHSA-FH54-3VHG-MPC2 PaddlePaddle command injection vulnerability
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
PaddlePaddle command injection vulnerability
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
CVE-2024-0815
Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...
CVE-2024-0815
Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...
CVE-2024-0815
Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...
CVE-2024-0817
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
Command injection
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
CVE-2024-0817
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
CVE-2024-0817
Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0...
PaddlePaddle Path Traversal Vulnerability
PaddlePaddle PaddlePaddle is an independent R & D deep learning platform open source by China's PaddlePaddle PaddlePaddle. PaddlePaddle 2.6.0 before the version of the path traversal vulnerability , the vulnerability stems from the existence of a path traversal vulnerability . Attackers can use t...
paddlepaddle 代码注入漏洞
PaddlePaddle PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle PaddlePaddle. A code injection vulnerability exists in paddlepaddle version 2.6.0, which stems from the application failing to properly filter special elements of constructed code segments...
PT-2024-15918
Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle version 2.6.0 Description The issue concerns remote code execution. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited...
PaddlePaddle Command Injection Vulnerability
PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle. A command injection vulnerability exists in PaddlePaddle version 2.6.0, which stems from the presence of a command injection vulnerability...
PaddlePaddle Operating System Command Injection Vulnerability
PaddlePaddle PaddlePaddle is an independent R&D deep learning platform open-sourced by China's PaddlePaddle PaddlePaddle. PaddlePaddle version 2.6.0 suffers from an operating system command injection vulnerability that stems from the presence of an operating system command injection vulnerability...
PT-2024-15837
Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle version 2.6.0 Description The issue concerns command injection in the IrGraph.draw function. Recommendations For paddlepaddle/paddle version 2.6.0, update to a version that fixes the command injection issue in the...
PT-2024-15838
Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle versions prior to 2.6 Description The issue concerns an arbitrary file overwrite via path traversal. Recommendations For versions prior to 2.6, update to version 2.6 or later to resolve the issue...
PT-2024-15835
Name of the Vulnerable Software and Affected Versions paddlepaddle/paddle version 2.6.0 Description The issue concerns a command injection in the paddle.utils.download. wget download function, which allows bypassing a filter. Recommendations For paddlepaddle/paddle version 2.6.0, at the moment,...
paddle-ner (=0.1.0), paddle-quantum (>=1.1.1 <=2.2.1) +3 more potentially affected by CVE-2024-0521 via paddlepaddle (=1.8.5)
paddlepaddle PYPI version =1.8.5 is affected by a known vulnerability. The following packages have a transitive dependency on paddlepaddle and may be impacted: - paddle-ner =0.1.0 - paddle-quantum =1.1.1, =1.8.5.0, =1.8.5.1 - paddle-tokenizer =0.1.0 - pyunit-ner =2021.8.2 Source cves: CVE-2024-05...
Code Injection in paddlepaddle
The vulnerability arises from the way the url parameter is incorporated into the command string without proper validation or sanitization. If the url is constructed from untrusted sources, an attacker could potentially inject malicious commands...