Lucene search
+L

10 matches found

Cvelist
Cvelist
•added 2024/03/07 3:13 a.m.•36 views

CVE-2024-0815

Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...

9.3CVSS9.7AI score0.01132EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/07 12:00 a.m.•1 views

CVE-2024-0815: Improper Neutralization of Special Elements used in an OS Command

Command injection in paddle.utils.download.wgetdownload bypass filter in paddlepaddle/paddle 2.6.0...

9.3CVSS5.8AI score0.01132EPSS
SaveExploits1References2
Veracode
Veracode
•added 2024/01/05 9:54 a.m.•18 views

Command Injection

PaddlePaddle is vulnerable to Command Injection. The vulnerability is caused due to improper command validation within the wgetdownload' method. The attacker can execute arbitrary commands on the operating system...

9.8CVSS7.8AI score0.01182EPSS
SaveExploits0References3Affected Software1
Github Security Blog
Github Security Blog
•added 2024/01/03 9:30 a.m.•33 views

PaddlePaddle command injection in _wget_download

PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system...

9.8CVSS8.1AI score0.01182EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/01/03 9:30 a.m.•29 views

GHSA-RF7P-79XQ-8XWM PaddlePaddle command injection in _wget_download

PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system...

9.6CVSS9.9AI score0.01182EPSS
SaveExploits0References5
NVD
NVD
•added 2024/01/03 9:15 a.m.•23 views

CVE-2023-52311

PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system...

9.8CVSS9.9AI score0.01182EPSS
SaveExploits0References1
OSV
OSV
•added 2024/01/03 9:15 a.m.•39 views

CVE-2023-52311

PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system...

9.8CVSS10AI score
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/03 8:15 a.m.•36 views

CVE-2023-52311 Command injection in _wget_download

PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system...

9.6CVSS10AI score0.01182EPSS
SaveExploits0References1
CVE
CVE
•added 2024/01/03 8:15 a.m.•80 views

CVE-2023-52311

CVE-2023-52311 affects PaddlePaddle prior to 2.6.0. The flaw is a command injection in the internal _wget_download function, enabling execution of arbitrary OS commands. The issue is network-exposed and yields high impact (confidentiality, integrity, and availability). Multiple external sources (...

9.8CVSS9.9AI score0.01182EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/03 12:00 a.m.•0 views

CVE-2023-52311: Improper Neutralization of Special Elements used in an OS Command

PaddlePaddle before 2.6.0 has a command injection in wgetdownload. This resulted in the ability to execute arbitrary commands on the operating system...

9.8CVSS8.5AI score0.01182EPSS
SaveExploits0References3
Rows per page
Query Builder