CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

Rapid7 Vulnerability Database (full)•added 2022/12/07 12:00 a.m.•1 views

CVE-2022-46742: Improper Control of Generation of Code

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

10CVSS6.3AI score0.01143EPSS

SaveExploits1References3

Rapid7 Vulnerability Database (full)•added 2022/11/26 12:00 a.m.•1 views

CVE-2022-45908: Improper Control of Generation of Code

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

9.8CVSS6.3AI score0.01398EPSS

SaveExploits1References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by