Lucene search
+L

179 matches found

Tenable Nessus
Tenable Nessus
added 2023/03/07 12:00 a.m.32 views

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2023-1435)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow before 9.3.0...

7.5CVSS7AI score0.01249EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2023/03/07 12:00 a.m.16 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1415)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01249EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:19 a.m.5 views

SUSE CVE-2018-1000518

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data Data Amplification vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sendi...

7.5CVSS7AI score0.01833EPSS
SaveExploits1References9
OpenVAS
OpenVAS
added 2023/02/10 12:00 a.m.18 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1369)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01249EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/02/10 12:00 a.m.24 views

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2023-1369)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow before 9.3.0...

7.5CVSS7AI score0.01249EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/02/10 12:00 a.m.26 views

EulerOS 2.0 SP10 : python-pillow (EulerOS-SA-2023-1397)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 - Pillow before 9.3.0...

7.5CVSS7AI score0.01249EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2023/01/09 12:00 a.m.21 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1110)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01249EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/01/09 12:00 a.m.24 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1134)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01249EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/01/06 12:00 a.m.27 views

EulerOS 2.0 SP9 : python-pillow (EulerOS-SA-2023-1110)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification. CVE-2022-45198 Note that Tenable Network...

7.5CVSS6.8AI score0.01249EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/12/13 12:00 a.m.46 views

Ubuntu 20.04 LTS / 22.04 LTS : Pillow vulnerabilities (USN-5777-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5777-1 advisory. It was discovered that Pillow incorrectly handled the deletion of temporary files when using a temporary directory that contains spaces. An...

9.1CVSS7.8AI score0.02879EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2022/11/14 12:00 p.m.37 views

Pillow vulnerable to Data Amplification attack.

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS7.5AI score0.01249EPSS
SaveExploits0References10Affected Software1
CVE
CVE
added 2022/11/14 12:00 a.m.142 views

CVE-2022-45198

CVE-2022-45198 affects Pillow up to version 9.2.0, where improper handling of highly compressed GIF data (Data Amplification) can cause abnormal resource usage. Public sources confirm Pillow prior to 9.2.0 is vulnerable; advisories reference upgrades to mitigate. Debian LTS notes Pillow updates (...

7.5CVSS7.4AI score0.01249EPSS
SaveExploits0References6Affected Software1
UbuntuCve
UbuntuCve
added 2022/11/14 12:00 a.m.74 views

CVE-2022-45198

Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data Data Amplification...

7.5CVSS6.8AI score0.01249EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2021/12/09 8:20 p.m.7 views

python-eventlet: improper handling of highly compressed data and memory allocation with excessive size allows DoS

A flaw was found in eventlet. If an unauthenticated user manages to send large websocket frames or highly compressed data frames that can lead to memory exhaustion. An attacker could use this flaw to cause a denial of service DoS...

5.3CVSS7.3AI score0.01807EPSS
SaveExploits0References4
Fedora
Fedora
added 2021/09/29 1:09 a.m.16 views

[SECURITY] Fedora 34 Update: squashfs-tools-4.5-3.20210913gite048580.fc34

Squashfs is a highly compressed read-only filesystem for Linux. This package contains the utilities for manipulating squashfs filesystems...

7.3AI score
SaveExploits0
securityvulns
securityvulns
added 2014/05/05 12:00 a.m.32 views

[SECURITY] [DSA 2895-1] prosody security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2895-1 [email protected] http://www.debian.org/security/ Luciano Bello April 06, 2014 http://www.debian.org/security/faq -...

1.8AI score
SaveExploits0
OSV
OSV
added 2014/04/06 12:00 a.m.22 views

DSA-2895-1 prosody - security update

Bulletin has no description...

7.8CVSS6AI score0.03313EPSS
SaveExploits2
OpenVAS
OpenVAS
added 2012/12/14 12:00 a.m.25 views

Fedora Update for squashfs-tools FEDORA-2012-19227

Check for the Version of squashfs-tools OpenVAS Vulnerability Test Fedora Update for squashfs-tools FEDORA-2012-19227 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

6.8CVSS0.04047EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2012/12/14 12:00 a.m.23 views

Fedora Update for squashfs-tools FEDORA-2012-19203

Check for the Version of squashfs-tools OpenVAS Vulnerability Test Fedora Update for squashfs-tools FEDORA-2012-19203 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

6.8CVSS0.1AI score0.04047EPSS
SaveExploits0References2
Rows per page
Query Builder