Lucene search
K

34 matches found

Fedora
Fedora
added 2026/02/18 4:26 a.m.6 views

[SECURITY] Fedora 43 Update: python-pillow-11.3.0-7.fc43

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt, devel developmen...

8.6CVSS5.5AI score0.00014EPSS
Exploits1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-0041

Malware in sbrugna...

4.4CVSS8.6AI score0.00098EPSS
Exploits1References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2014-0042

Malware in sbrugna...

2.1CVSS8.6AI score0.00111EPSS
Exploits1References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2014-0043

Malware in sbrugna...

10CVSS8.6AI score0.03547EPSS
Exploits1References7
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2014-1932

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 loaddjpeg function in JpegImagePlugin.py, 2 Ghostscript function in EpsImagePlugin.py, 3 load function in IptcImagePlugin.py, and 4 copy function in...

4.4CVSS8AI score0.00098EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/03/04 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2014-1933

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The 1 JpegImagePlugin.py and 2 EpsImagePlugin.py scripts in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files...

2.1CVSS7.9AI score0.00111EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/11/14 12:0 a.m.1 views

Pillow 资源管理错误漏洞

Pillow is a Python based image processing library. A security vulnerability exists in Pillow versions prior to 9.3.0 that stems from allowing denial of service via SAMPLESPERPIXEL...

7.5CVSS6.9AI score0.00154EPSS
Exploits0References8
Github Security Blog
Github Security Blog
added 2022/05/17 4:45 a.m.36 views

Pillow command injection

Python Image Library PIL 1.1.7 and earlier and Pillow before 2.5.0 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

10CVSS7.9AI score0.03547EPSS
Exploits0References5Affected Software1
OSV
OSV
added 2022/05/17 4:45 a.m.28 views

GHSA-8M9X-PXWQ-J236 Pillow command injection

Python Image Library PIL 1.1.7 and earlier and Pillow before 2.5.0 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

9.8CVSS8.9AI score0.03547EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2022/05/17 2:39 a.m.33 views

PIL and Pillow Vulnerable to Symlink Attack on Tmpfiles

The 1 loaddjpeg function in JpegImagePlugin.py, 2 Ghostscript function in EpsImagePlugin.py, 3 load function in IptcImagePlugin.py, and 4 copy function in Image.py in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 do not properly create temporary files, which allow local users...

4.4CVSS6.3AI score0.00098EPSS
Exploits1References10Affected Software1
Fedora
Fedora
added 2021/03/15 1:8 a.m.49 views

[SECURITY] Fedora 32 Update: python-pillow-7.0.0-7.fc32

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

9.8CVSS1.4AI score0.00762EPSS
Exploits0
Github Security Blog
Github Security Blog
added 2020/05/18 5:41 p.m.104 views

Pillow Temporary file name leakage

The 1 JpegImagePlugin.py and 2 EpsImagePlugin.py scripts in Python Image Library PIL 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local users to conduct symlink attacks by listing the processes...

2.1CVSS8.7AI score0.00111EPSS
Exploits1References9Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/01/19 12:0 a.m.27 views

Oracle Solaris Third-Party Patch Update : py_pil (multiple_vulnerabilities_in_python_image)

The remote Solaris system is missing necessary patches to address security updates : - The 1 loaddjpeg function in JpegImagePlugin.py, 2 Ghostscript function in EpsImagePlugin.py, 3 load function in IptcImagePlugin.py, and 4 copy function in Image.py in Python Image Library PIL 1.1.7 and earlier...

4.4CVSS8.2AI score0.00111EPSS
Exploits2References4
NVD
NVD
added 2014/04/27 8:55 p.m.21 views

CVE-2014-3007

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

10CVSS7AI score0.03547EPSS
Exploits0References2
OSV
OSV
added 2014/04/27 8:55 p.m.5 views

CVE-2014-3007

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

4.4CVSS7.3AI score0.00098EPSS
Exploits1References2
PyPA
PyPA
added 2014/04/27 8:55 p.m.6 views

PYSEC-2014-87

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

10CVSS7.9AI score0.03547EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2014/04/27 8:55 p.m.21 views

PYSEC-2014-87

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

10CVSS7.9AI score0.03547EPSS
Exploits1References2
UbuntuCve
UbuntuCve
added 2014/04/27 8:55 p.m.26 views

CVE-2014-3007

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

10CVSS7.4AI score0.03547EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2014/04/27 8:0 p.m.36 views

CVE-2014-3007

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

10CVSS9.2AI score0.03547EPSS
Exploits0
Cvelist
Cvelist
added 2014/04/27 8:0 p.m.30 views

CVE-2014-3007

Python Image Library PIL 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py...

8AI score0.03547EPSS
Exploits0References2
Rows per page
Query Builder