Baidu, Inc.
First CVE: Dec 7, 2022Active for: 4 years
25
CVEs Published
More CVEs Published than 45% of tracked CNAs
8.3
Avg CVEs / Year
More Avg CVEs / Year than 48% of tracked CNAs
8.5
Avg CVSS Score
Higher Avg CVSS Score than 94% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Self-Reporting Analysis
Of all the CVEs published by Baidu, Inc. as a CNA, 0.0% affect products that Baidu, Inc. develops as a vendor.
100.0%
Self-reported: 0Third-party: 25
Of all the CVEs published that affect products developed by Baidu, Inc., 0.0% are self-published by Baidu, Inc. as a CNA.
100.0%
Self-published: 0Published by other CNAs: 21
Trends Over Time
The number and severity of CVEs published by Baidu, Inc. over time
Volume of CVEsAvg CVSS Base Score
First CVE
Dec 7, 2022
3 years ago
Most Recent CVE
Jan 3, 2024
934 days ago
Top CVEs
All CVEs published by Baidu, Inc. as a CNA, regardless of affected vendor or product.
25 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-52314CRITICAL PaddlePaddle before 2.6.0 has a command injection in convert_shape_compare. This resulted in the ability to execute arbitrary commands on the operating system.
| Jan 3, 2024 | 9.8 | 30 | NO | NO |
CVE-2022-46742CRITICAL Code injection in paddle.audio.functional.get_window in PaddlePaddle 2.4.0-rc0 allows arbitrary code execution.
| Dec 7, 2022 | 9.8 | 30 | NO | NO |
CVE-2023-52304CRITICAL Stack overflow in paddle.searchsorted in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, or even more damage.
| Jan 3, 2024 | 9.8 | 29 | NO | NO |
CVE-2022-46741CRITICAL Out-of-bounds read in gather_tree in PaddlePaddle before 2.4. | Dec 7, 2022 | 9.1 | 29 | NO | NO |
CVE-2023-38673CRITICAL PaddlePaddle before 2.5.0 has a command injection in fs.py. This resulted in the ability to execute arbitrary commands on the operating system.
| Jul 26, 2023 | 9.8 | 27 | NO | NO |
CVE-2023-52310CRITICAL PaddlePaddle before 2.6.0 has a command injection in get_online_pass_interval. This resulted in the ability to execute arbitrary commands on the operating system.
| Jan 3, 2024 | 9.8 | 26 | NO | NO |
CVE-2023-38671CRITICAL Heap buffer overflow in paddle.trace in PaddlePaddle before 2.5.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
| Jul 26, 2023 | 9.8 | 26 | NO | NO |
CVE-2023-52311CRITICAL PaddlePaddle before 2.6.0 has a command injection in _wget_download. This resulted in the ability to execute arbitrary commands on the operating system.
| Jan 3, 2024 | 9.8 | 25 | NO | NO |
CVE-2023-38669CRITICAL Use after free in paddle.diagonal in PaddlePaddle before 2.5.0. This resulted in a potentially exploitable condition.
| Jul 26, 2023 | 9.8 | 25 | NO | NO |
CVE-2023-52309CRITICAL Heap buffer overflow in paddle.repeat_interleave in PaddlePaddle before 2.6.0. This flaw can lead to a denial of service, information disclosure, or more damage is possible.
| Jan 3, 2024 | 9.8 | 24 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA25 CVEs
56%
44%
Severity distribution among all CVEs352,427 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network25 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low25 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None25 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None25 (100.0%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (25 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by Baidu, Inc. as a CNA.
Media Mentions
Media articles that mention a CVE ID published by Baidu, Inc. as a CNA — matched by CVE ID, not by organization name.