Lucene search
+L

2673 matches found

Positive Technologies
Positive Technologies
•added 2021/02/01 12:00 a.m.•3 views

PT-2021-13567

Name of the Vulnerable Software and Affected Versions: curl affected versions not specified Description: An out-of-bounds read issue existed in the curl, which was addressed with improved bounds checking. Processing a maliciously crafted image may lead to a denial of service. Recommendations: At...

5.5CVSS5.8AI score0.00767EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2021/02/01 12:00 a.m.•1 views

PT-2021-13534

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.2 Security Update versions prior to 2021-001 Catalina Security Update versions prior to 2021-001 Mojave Description: An out-of-bounds write issue was addressed with improved input validation. Processing a maliciousl...

7.8CVSS6.1AI score0.00938EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2021/01/26 12:00 a.m.•21 views

Rust 安全漏洞

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in Rust im crate through 2020-11-09, which stems from a limitation that TreeFocus does not have a send feature or a synchronization feature, resulting in a data contention...

4.7CVSS5.8AI score0.00332EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2021/01/25 12:00 a.m.•23 views

Fedora: Security Advisory for python-pillow (FEDORA-2021-880aa7bd27)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.1CVSS8.3AI score0.01663EPSS
SaveExploits0References2
Fedora
Fedora
•added 2021/01/24 1:23 a.m.•140 views

[SECURITY] Fedora 32 Update: python-pillow-7.0.0-5.fc32

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

8.8CVSS1.4AI score0.01817EPSS
SaveExploits0
Fedora
Fedora
•added 2021/01/21 1:47 a.m.•82 views

[SECURITY] Fedora 33 Update: python-pillow-7.2.0-3.fc33

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

8.8CVSS1.4AI score0.01817EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2021/01/21 12:00 a.m.•36 views

Fedora: Security Advisory for python-pillow (FEDORA-2021-a8ddc1ce70)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.3AI score
SaveExploits0References2
CNVD
CNVD
•added 2021/01/14 12:00 a.m.•32 views

Pillow Buffer Overflow Vulnerability (CNVD-2021-54038)

Pillow is a Python-based image processing library. buffer overflow vulnerability exists in versions of Pillow prior to 8.1.0, which can be exploited by attackers to cause a buffer over read...

7.1CVSS5.5AI score0.0164EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/12/24 12:00 a.m.•14 views

Magical Image Converter and Processor (Windows Edition) Denial of Service Vulnerability

Magic Image Processing Software is a professional, easy-to-use and efficient image processing software toolset developed by Beijing Magic Pixel Technology Co. A denial of service vulnerability exists in Miracle Image Converter windows version, which can be exploited by attackers to cause a softwa...

6.9AI score
SaveExploits0
CNVD
CNVD
•added 2020/12/23 12:00 a.m.•48 views

ImageMagick Input Validation Error Vulnerability (CNVD-2021-11327)

ImageMagick is a suite of open source image processing software. The software can read, convert or write images in a variety of formats. ImageMagick suffers from a security vulnerability, which stems from IntensityCompare of /magick/quantize.c, where a call to PixelPacketIntensity returns an...

4.3CVSS7.5AI score0.01138EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•21 views

The vulnerability of the realloc function in the Pillow image processing library allows a malicious actor to cause a service failure.

The vulnerability of the realloc function in the Pillow image processing library libImaging/TiffDecode.c is due to a numerical overflow during the processing of TIFF images. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

9.3CVSS6.5AI score0.01975EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2020/12/22 12:00 a.m.•13 views

The vulnerability of the PCX P library for image processing in Pillow allows a hacker to trigger a service failure.

The vulnerability of the PCX P library for image processing in Pillow relates to the issue of the operation exceeding the buffer boundaries in memory during the encoding of PCX images. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

9.8CVSS7AI score0.0369EPSS
SaveExploits0References14Affected Software6
Apple
Apple
•added 2020/12/15 6:02 a.m.•81 views

About the security content of iCloud for Windows 11.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.7AI score0.05961EPSS
SaveExploits9Affected Software1
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•63 views

Imagemagick Studio ImageMagick Input Validation Error Vulnerability (CNVD-2021-23801)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions of ImageMagick prior to 7.0.9-0, which...

5.5CVSS6.4AI score0.00843EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•17 views

Imagemagick Studio ImageMagick Resource Management Error Vulnerability (CNVD-2021-25968)

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A resource management error vulnerability exists in versions of ImageMagick prior to...

5.5CVSS7AI score0.01115EPSS
SaveExploits1References1
CNVD
CNVD
•added 2020/12/15 12:00 a.m.•26 views

ImageMagick Code Issue Vulnerability

Imagemagick Studio ImageMagick is a suite of open source image processing software from ImageMagick Studio Imagemagick Studio, an American company. The software can read, convert or write images in many formats. A security vulnerability exists in versions prior to ImageMagick 7.0.8-68, which stem...

5.5CVSS5.9AI score0.01028EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
•added 2020/12/14 1:36 p.m.•14 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03327EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/12/14 11:50 a.m.•19 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03327EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/12/14 11:36 a.m.•14 views

libexif: out of bounds write due to an integer overflow in exif-entry.c

A flaw was found in libexif. A possible out of bounds write, due ot an integer overflow, could lead to a remote code execution if a third party app used this library to process remote image data. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

9.8CVSS7.9AI score0.03327EPSS
SaveExploits0References4
Apple
Apple
•added 2020/12/14 12:00 a.m.•189 views

About the security content of tvOS 14.3

About the security content of tvOS 14.3 This document describes the security content of tvOS 14.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

8.8CVSS9.6AI score0.0174EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder