Lucene search
+L

2727 matches found

CNNVD
CNNVD
•added 2022/02/23 12:00 a.m.•29 views

Accusoft ImageGear buffer error vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, U.S. Accusoft ImageGear suffers from a heap buffer overflow vulnerability, which can be exploited by attackers to build files that could result in a heap buffer overflow...

9.8CVSS6.1AI score0.01084EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/02/23 12:00 a.m.•21 views

Accusoft ImageGear buffer error vulnerability

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in Accusoft ImageGear, which can be exploited by an attacker to send a specially crafted file and execute arbitrary code on the target system...

9.8CVSS6.3AI score0.01913EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/02/22 5:47 p.m.•80 views

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.8CVSS7AI score0.03334EPSS
SaveExploits0References3
osv_alsa
osv_alsa
•added 2022/02/22 5:25 p.m.•38 views

ALSA-2022:0643 Important: python-pillow security update

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions...

9.8CVSS7.1AI score0.03334EPSS
SaveExploits0References4
osv_rlsa
osv_rlsa
•added 2022/02/22 5:25 p.m.•56 views

RLSA-2022:0643 Important: python-pillow security update

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions...

9.8CVSS7.1AI score0.03334EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
•added 2022/02/22 5:25 p.m.•74 views

Important: python-pillow security update

The python-pillow packages contain a Python image processing library that provides extensive file format support, an efficient internal representation, and powerful image-processing capabilities. Security Fixes: python-pillow: PIL.ImageMath.eval allows evaluation of arbitrary expressions...

9.8CVSS7.1AI score0.03334EPSS
SaveExploits0References4
Rockylinux
Rockylinux
•added 2022/02/22 5:25 p.m.•56 views

python-pillow security update

An update is available for python-pillow. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The python-pillow packages contain a Python image processing library th...

9.8CVSS7AI score0.03334EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2022/02/22 3:58 p.m.•64 views

Important: Red Hat Security Advisory: python-pillow security update

An update for python-pillow is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

9.8CVSS7AI score0.03334EPSS
SaveExploits0References3
Ubuntu
Ubuntu
•added 2022/02/08 9:57 a.m.•48 views

USN-5143-1: Leptonica vulnerability

It was discovered that Leptonica incorrectly handled certain image files. An attacker could possibly use this issue to execute arbitrary code or other unspecified impact...

9.8CVSS8.8AI score0.02466EPSS
SaveExploits0
Fedora
Fedora
•added 2022/02/04 1:23 a.m.•46 views

[SECURITY] Fedora 35 Update: python-pillow-8.3.2-2.fc35

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

9.8CVSS6.9AI score0.03334EPSS
SaveExploits0
Fedora
Fedora
•added 2022/02/04 1:23 a.m.•38 views

[SECURITY] Fedora 34 Update: python-pillow-8.1.2-6.fc34

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

9.8CVSS6.9AI score0.03334EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2022/02/04 12:00 a.m.•35 views

Fedora: Security Advisory for python-pillow (FEDORA-2022-e4087f9366)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7AI score0.03334EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/02/04 12:00 a.m.•43 views

Fedora: Security Advisory for python-pillow (FEDORA-2022-a1bc7decc9)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7AI score0.03334EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•43 views

Debian: Security Advisory (DLA-2902-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.02924EPSS
SaveExploits1References4
CNVD
CNVD
•added 2022/01/14 12:00 a.m.•45 views

Pillow out-of-bounds read vulnerability (CNVD-2022-05433)

Pillow is a Python-based image processing library. An out-of-bounds read vulnerability exists in versions of Pillow prior to 9.0.0, which stems from a buffer over-read in pathgetbbox in path.c during initialization of ImagePath. An attacker could exploit this vulnerability to read memory-sensitiv...

6.5CVSS4.7AI score0.0192EPSS
SaveExploits0References1
CNVD
CNVD
•added 2022/01/14 12:00 a.m.•48 views

Pillow input validation error vulnerability

Pillow is a Python-based image processing library. Pillow is vulnerable to an input validation error prior to 9.0.0, which stems from a networked system or product that does not properly validate input data. An attacker could exploit this vulnerability to execute arbitrary expressions using the...

9.8CVSS7.3AI score0.03334EPSS
SaveExploits0References1
Fedora
Fedora
•added 2022/01/13 1:00 a.m.•34 views

[SECURITY] Fedora 34 Update: gegl04-0.4.34-1.fc34

GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMP's itches for a new compositing and processing core. This core is being designed to have minimal dependencies and a simple well defined API...

7.8CVSS7.3AI score0.01548EPSS
SaveExploits0
NVD
NVD
•added 2022/01/12 1:15 p.m.•27 views

CVE-2021-44648

GNOME gdk-pixbuf 2.42.6 is vulnerable to a heap-buffer overflow vulnerability when decoding the lzw compressed stream of image data in GIF files with lzw minimum code size equals to 12...

8.8CVSS0.01906EPSS
SaveExploits1References5
osv_debian
osv_debian
•added 2022/01/10 2:12 p.m.•16 views

DEBIAN-CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS6.7AI score0.02578EPSS
SaveExploits0References1
Fedora
Fedora
•added 2022/01/08 1:19 a.m.•35 views

[SECURITY] Fedora 35 Update: gegl04-0.4.34-1.fc35

GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMP's itches for a new compositing and processing core. This core is being designed to have minimal dependencies and a simple well defined API...

7.8CVSS7.3AI score0.01548EPSS
SaveExploits0
Rows per page
Query Builder