<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Baidu, Inc. — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/baidu" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Baidu, Inc. (baidu).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/baidu.png</url>
      <title>Baidu, Inc. — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2023-52314 · 9.6 CRITICAL 🌩️ — Command injection in convert_shape_compare</title>
      <link>https://vulnogram.org/CVE-2023-52314</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52314</guid>
      <description>PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:15:52 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52313 · 4.7 MEDIUM 🌩️ — FPE in paddle.argmin and paddle.argmax</title>
      <link>https://vulnogram.org/CVE-2023-52313</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52313</guid>
      <description>FPE in paddle.argmin and paddle.argmax in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:15:20 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52312 · 4.7 MEDIUM 🌩️ — Null pointer dereference in paddle.crop</title>
      <link>https://vulnogram.org/CVE-2023-52312</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52312</guid>
      <description>Nullptr dereference in paddle.crop in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:15:13 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52311 · 9.6 CRITICAL 🌩️ — Command injection in _wget_download</title>
      <link>https://vulnogram.org/CVE-2023-52311</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52311</guid>
      <description>PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:15:04 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52310 · 9.6 CRITICAL 🌩️ — Command injection in get_online_pass_interval</title>
      <link>https://vulnogram.org/CVE-2023-52310</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52310</guid>
      <description>PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:14:55 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52309 · 8.2 HIGH 🌩️ — Heap buffer overflow in paddle.repeat_interleave</title>
      <link>https://vulnogram.org/CVE-2023-52309</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52309</guid>
      <description>Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:14:27 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52308 · 4.7 MEDIUM 🌩️ — FPE in paddle.amin</title>
      <link>https://vulnogram.org/CVE-2023-52308</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52308</guid>
      <description>FPE in paddle.amin in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:14:13 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52307 · 8.2 HIGH 🌩️ — Stack overflow in paddle.linalg.lu_unpack</title>
      <link>https://vulnogram.org/CVE-2023-52307</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52307</guid>
      <description>Stack overflow in paddle.linalg.lu_unpack in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:14:03 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52306 · 4.7 MEDIUM 🌩️ — FPE in paddle.lerp</title>
      <link>https://vulnogram.org/CVE-2023-52306</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52306</guid>
      <description>FPE in paddle.lerp in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:13:52 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52305 · 4.7 MEDIUM 🌩️ — FPE in paddle.topk</title>
      <link>https://vulnogram.org/CVE-2023-52305</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52305</guid>
      <description>FPE in paddle.topk in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:13:26 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52304 · 8.2 HIGH 🌩️ — Stack overflow in paddle.searchsorted</title>
      <link>https://vulnogram.org/CVE-2023-52304</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52304</guid>
      <description>Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:13:13 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52303 · 4.7 MEDIUM 🌩️ — Segfault in paddle.put_along_axis</title>
      <link>https://vulnogram.org/CVE-2023-52303</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52303</guid>
      <description>Nullptr in paddle.put_along_axis in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:12:59 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-52302 · 4.7 MEDIUM 🌩️ — Segfault in paddle.nextafter</title>
      <link>https://vulnogram.org/CVE-2023-52302</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-52302</guid>
      <description>Nullptr in paddle.nextafter in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:12:45 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38678 · 4.7 MEDIUM 🌩️ — Segfault in paddle.mode</title>
      <link>https://vulnogram.org/CVE-2023-38678</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38678</guid>
      <description>OOB access in paddle.mode in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:11:55 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38677 · 4.7 MEDIUM 🌩️ — FPE in paddle.linalg.eig</title>
      <link>https://vulnogram.org/CVE-2023-38677</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38677</guid>
      <description>FPE in paddle.linalg.eig in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:11:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38676 · 4.7 MEDIUM 🌩️ — Segfault in paddle.dot</title>
      <link>https://vulnogram.org/CVE-2023-38676</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38676</guid>
      <description>Nullptr in paddle.dot in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:11:05 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38675 · 4.7 MEDIUM 🌩️ — FPE in paddle.linalg.matrix_rank</title>
      <link>https://vulnogram.org/CVE-2023-38675</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38675</guid>
      <description>FPE in paddle.linalg.matrix_rank in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:10:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38674 · 4.7 MEDIUM 🌩️ — FPE in paddle.nanmedian</title>
      <link>https://vulnogram.org/CVE-2023-38674</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38674</guid>
      <description>FPE in paddle.nanmedian in PaddlePaddle before 2.6.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 03 Jan 2024 08:10:10 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38673 · 9.6 CRITICAL 🌩️ — Command injection in fs.py</title>
      <link>https://vulnogram.org/CVE-2023-38673</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38673</guid>
      <description>PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Jul 2023 11:10:34 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38672 · 4.7 MEDIUM 🌩️ — FPE in paddle.linalg.matrix_power</title>
      <link>https://vulnogram.org/CVE-2023-38672</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38672</guid>
      <description>FPE in paddle.trace in PaddlePaddle before 2.5.0. This flaw can cause a runtime crash and a denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Jul 2023 11:04:13 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38671 · 8.3 HIGH 🌩️ — Heap buffer overflow in paddle.trace</title>
      <link>https://vulnogram.org/CVE-2023-38671</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38671</guid>
      <description>Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Jul 2023 10:59:48 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38670 · 4.7 MEDIUM 🌩️ — Null pointer dereference in paddle.flip</title>
      <link>https://vulnogram.org/CVE-2023-38670</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38670</guid>
      <description>Null pointer dereference in paddle.flip in PaddlePaddle before 2.5.0. This resulted in a runtime crash and denial of service.</description>
      <category>Medium</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Jul 2023 10:50:12 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2023-38669 · 8.3 HIGH 🌩️</title>
      <link>https://vulnogram.org/CVE-2023-38669</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2023-38669</guid>
      <description>Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.</description>
      <category>High</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 26 Jul 2023 09:29:39 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-46742 · 10 CRITICAL 🌩️</title>
      <link>https://vulnogram.org/CVE-2022-46742</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-46742</guid>
      <description>Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.</description>
      <category>Critical</category>
      <category>Network Exploitable</category>
      <pubDate>Wed, 07 Dec 2022 08:16:09 GMT</pubDate>
    </item>
    <item>
      <title>CVE-2022-46741 · 7.1 HIGH</title>
      <link>https://vulnogram.org/CVE-2022-46741</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2022-46741</guid>
      <description>Out-of-bounds read in gather_tree in PaddlePaddle before 2.4.</description>
      <category>High</category>
      <pubDate>Wed, 07 Dec 2022 07:41:04 GMT</pubDate>
    </item>
  </channel>
</rss>
