Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2635▼ 212 respecto a la semana anterior
Críticas / altas1376▲ 147 respecto a la semana anterior
Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior
34 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Aplazada | Baja (2) | 0.07% | — | Paddlepaddle FastdeployAI | 4/6/2026 | 22/7/2026 | A weakness has been identified in PaddlePaddle FastDeploy up to 2.4.1. Affected by this issue is the function hash_features of the file fastdeploy/multimodal/hasher.py of the component MultimodalHasher. Executing a manipulation can lead to use of weak hash. The attack requires local access. A high complexity level is… | |
| Analizada | Alta (7.5) | 0.56% | — | Paddlepaddle | 23/3/2024 | 17/6/2026 | paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.read_file. | |
| Analizada | Crítica (9.1) | 1.1% | — | Paddlepaddle | 7/3/2024 | 17/6/2026 | Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6 | |
| Analizada | Crítica (9.8) | 1.7% | — | Paddlepaddle | 7/3/2024 | 17/6/2026 | remote code execution in paddlepaddle/paddle 2.6.0 | |
| Analizada | Alta (8.8) | 1.1% | — | Paddlepaddle | 7/3/2024 | 17/6/2026 | Command injection in paddle.utils.download._wget_download (bypass filter) in paddlepaddle/paddle 2.6.0 | |
| Analizada | Alta (7.8) | 1.2% | — | Paddlepaddle | 7/3/2024 | 17/6/2026 | Command injection in IrGraph.draw in paddlepaddle/paddle 2.6.0 | |
| Modificada | Alta (7.8) | 0.46% | — | Paddlepaddle Paddle | 20/1/2024 | 17/6/2026 | Code Injection in paddlepaddle/paddle | |
| Modificada | Crítica (9.8) | 1.2% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Crítica (9.8) | 1.2% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system. | |
| Modificada | Crítica (9.8) | 1.2% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system. | |
| Modificada | Crítica (9.8) | 0.54% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Crítica (9.8) | 0.53% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Crítica (9.8) | 0.58% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Alta (7.5) | 0.55% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. | |
| Modificada | Alta (7.5) | 0.49% | — | Paddlepaddle | 3/1/2024 | 17/6/2026 | FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service. |