Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2024/01/03 9:30 a.m.23 views

PaddlePaddle command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

9.8CVSS8.1AI score0.00334EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2024/01/03 9:30 a.m.10 views

GHSA-3CR5-2446-8PG3 PaddlePaddle command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

9.6CVSS9.9AI score0.00334EPSS
Exploits0References5
NVD
NVD
added 2024/01/03 9:15 a.m.9 views

CVE-2023-52314

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

9.8CVSS9.9AI score0.00334EPSS
Exploits0References1
OSV
OSV
added 2024/01/03 9:15 a.m.9 views

CVE-2023-52314

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

9.8CVSS10AI score
Exploits0References1
Prion
Prion
added 2024/01/03 9:15 a.m.7 views

Command injection

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

7.5CVSS8.4AI score0.00334EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/03 8:15 a.m.12 views

CVE-2023-52314 Command injection in convert_shape_compare

PaddlePaddle before 2.6.0 has a command injection in convertshapecompare. This resulted in the ability to execute arbitrary commands on the operating system...

9.6CVSS10AI score0.00334EPSS
Exploits0References1
CVE
CVE
added 2024/01/03 8:15 a.m.52 views

CVE-2023-52314

CVE-2023-52314 affects PaddlePaddle prior to 2.6.0, where a command injection in convert_shape_compare allows execution of arbitrary OS commands. The issue is described consistently across multiple sources (OSV, GHSA, NVD, CVE lists) as a critical, network-accessible vulnerability with high impac...

9.8CVSS9.9AI score0.00334EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder