Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

43 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2023-52303	Modificada	Alta (7.5)	0.49%	—	Paddlepaddle	3/1/2024	17/6/2026	Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-52302	Modificada	Alta (7.5)	0.55%	—	Paddlepaddle	3/1/2024	17/6/2026	Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38678	Modificada	Alta (7.5)	0.49%	—	Paddlepaddle	3/1/2024	17/6/2026	OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38677	Modificada	Alta (7.5)	0.49%	—	Paddlepaddle	3/1/2024	17/6/2026	FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38676	Modificada	Alta (7.5)	0.49%	—	Paddlepaddle	3/1/2024	17/6/2026	Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38675	Modificada	Alta (7.5)	0.49%	—	Paddlepaddle	3/1/2024	17/6/2026	FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38674	Modificada	Alta (7.5)	0.49%	—	Paddlepaddle	3/1/2024	17/6/2026	FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38673	Modificada	Crítica (9.8)	2.3%	—	Paddlepaddle	26/7/2023	17/6/2026	PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system.
CVE-2023-38672	Modificada	Alta (7.5)	0.74%	—	Paddlepaddle	26/7/2023	17/6/2026	FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.
CVE-2023-38671	Modificada	Crítica (9.8)	0.76%	—	Paddlepaddle	26/7/2023	17/6/2026	Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
CVE-2023-38670	Modificada	Alta (7.5)	0.66%	—	Paddlepaddle	26/7/2023	17/6/2026	Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.
CVE-2023-38669	Modificada	Crítica (9.8)	0.77%	—	Paddlepaddle	26/7/2023	17/6/2026	Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.
CVE-2022-46742	Modificada	Crítica (9.8)	1.1%	—	Paddlepaddle	7/12/2022	17/6/2026	Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.
CVE-2022-46741	Modificada	Crítica (9.1)	0.68%	—	Paddlepaddle	7/12/2022	17/6/2026	Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.
CVE-2022-45478	Modificada	Media (5.9)	0.32%	—	Telepad-app Telepad	5/12/2022	17/6/2026	Telepad allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE-2022-45477	Modificada	Crítica (9.8)	2.5%	💥 PoC	Telepad-app Telepad	5/12/2022	17/6/2026	Telepad allows remote unauthenticated users to send instructions to the server to execute arbitrary code without any previous authorization or authentication. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVE-2022-45908	Modificada	Crítica (9.8)	1.4%	—	Paddlepaddle	26/11/2022	17/6/2026	In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVE-2022-31523	Modificada	Crítica (9.3)	1.3%	—	Paddlepaddle Anakin	11/7/2022	17/6/2026	The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.