Lucene search
+L

4 matches found

Mend
Mend
•added 2022/12/07 8:16 a.m.•10 views

CVE-2022-46742

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

10CVSS0.01186EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/07 12:00 a.m.•4 views

CVE-2022-46742: Improper Control of Generation of Code

Code injection in paddle.audio.functional.getwindow in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution...

10CVSS6.3AI score0.01186EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/26 12:00 a.m.•4 views

CVE-2022-45908: Improper Control of Generation of Code

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

9.8CVSS6.3AI score0.01426EPSS
SaveExploits1References3
Mend
Mend
•added 2022/11/26 12:00 a.m.•10 views

CVE-2022-45908

In PaddlePaddle before 2.4, paddle.audio.functional.getwindow is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution...

9.8CVSS0.01426EPSS
SaveExploits1References7
Rows per page
Query Builder