Lucene search

Pillow Temporary file name leakage

🗓️ 18 May 2020 17:19:41Reported by GitHub Advisory DatabaseType

PIL and Pillow temporary file name leakage vulnerabilit

Reporter	Title	Published	Views	Family All 63
OpenVAS	Fedora Update for python-pillow FEDORA-2014-5487	5 May 201400:00	–	openvas
OpenVAS	Fedora Update for python-pillow FEDORA-2014-5492	5 May 201400:00	–	openvas
OpenVAS	Fedora Update for python-pillow FEDORA-2014-5487	5 May 201400:00	–	openvas
OpenVAS	Fedora Update for python-pillow FEDORA-2014-5492	5 May 201400:00	–	openvas
OpenVAS	Mageia: Security Advisory (MGASA-2014-0159)	28 Jan 202200:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2014:0705-1)	9 Jun 202100:00	–	openvas
OpenVAS	Ubuntu Update for python-imaging USN-2168-1	21 Apr 201400:00	–	openvas
OpenVAS	Fedora Update for python-pillow FEDORA-2014-9536	27 Aug 201400:00	–	openvas
OpenVAS	Mageia: Security Advisory (MGASA-2014-0158)	28 Jan 202200:00	–	openvas
OpenVAS	Ubuntu: Security Advisory (USN-2168-1)	21 Apr 201400:00	–	openvas

Vulners

Node

python pillowRange<2.3.1

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2014-1933
github	www.github.com/python-imaging/Pillow/commit/4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7
security	www.security.gentoo.org/glsa/201612-52
lists	www.lists.opensuse.org/opensuse-updates/2014-05/msg00002.html
openwall	www.openwall.com/lists/oss-security/2014/02/10/15
openwall	www.openwall.com/lists/oss-security/2014/02/11/1
ubuntu	www.ubuntu.com/usn/USN-2168-1
github	www.github.com/advisories/GHSA-r854-96gq-rfg3
github	www.github.com/pypa/advisory-database/tree/main/vulns/pillow/PYSEC-2014-23.yaml

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

18 May 2020 17:41Current

8.7High risk

Vulners AI Score8.7

CVSS22.1

EPSS0.00042