Lucene search
+L

2673 matches found

OSV
OSV
•added 2020/07/28 12:00 a.m.•10 views

OSV-2020-1394 Index-out-of-bounds in LibRaw::ahd_interpolate_r_and_b_in_rgb_and_convert_to_cielab

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=23605 Crash type: Index-out-of-bounds Crash state: LibRaw::ahdinterpolaterandbinrgbandconverttocielab LibRaw::ahdinterpolaterandbandconverttocielab LibRaw::ahdinterpolate...

7.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2020/07/21 12:00 a.m.•38 views

TYPO3 8.x < 8.7.25 / 9.x < 9.5.6 Multiple Vulnerabilities

The version of TYPO3 installed on the remote host is 8.x prior to 8.7.25 or 9.x prior to 9.5.6. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability exists in Typo3's image processing functionality due to a failure to properly configure applications it...

9.3CVSS8.2AI score0.03917EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2020/07/20 3:15 p.m.•7 views

CVE-2020-8215

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

8.8CVSS8.8AI score0.02323EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/07/20 3:01 p.m.•47 views

CVE-2020-8215

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

9AI score0.02323EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/07/20 12:00 a.m.•3 views

PT-2020-20029

Name of the Vulnerable Software and Affected Versions canvas versions prior to 1.6.11 Description A buffer overflow issue is present, which could lead to a Denial of Service or execution of arbitrary code when the software processes a user-provided image. Recommendations For versions prior to...

8.8CVSS0.02323EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/07/20 12:00 a.m.•7 views

CVE-2020-8215: Buffer Copy without Checking Size of Input

A buffer overflow is present in canvas version = 1.6.9, which could lead to a Denial of Service or execution of arbitrary code when it processes a user-provided image...

8.8CVSS6.4AI score0.02323EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2020/07/12 12:00 a.m.•62 views

Fedora: Security Advisory for python-pillow (FEDORA-2020-d0737711b6)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS6.9AI score0.02514EPSS
SaveExploits0References2
Fedora
Fedora
•added 2020/07/10 1:02 a.m.•45 views

[SECURITY] Fedora 31 Update: python-pillow-6.2.2-3.fc31

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

8.1CVSS1.4AI score0.02514EPSS
SaveExploits0
OSV
OSV
•added 2020/07/07 2:15 p.m.•14 views

CVE-2020-15584

An issue was discovered on Samsung mobile devices with Q10.0 software. Attackers can trigger an out-of-bounds access and device reset via a 4K wallpaper image because ImageProcessHelper mishandles boundary checks. The Samsung ID is SVE-2020-18056 July 2020...

5.5CVSS6.1AI score0.00274EPSS
SaveExploits0References1
Fedora
Fedora
•added 2020/07/04 1:14 a.m.•50 views

[SECURITY] Fedora 32 Update: python-pillow-7.0.0-4.fc32

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

8.1CVSS1.4AI score0.02514EPSS
SaveExploits0
Debian
Debian
•added 2020/06/30 8:31 p.m.•240 views

[SECURITY] [DSA 4712-1] imagemagick security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4712-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 30, 2020 https://www.debian.org/security/faq -...

9.8CVSS7AI score0.04352EPSS
SaveExploits30
CNVD
CNVD
•added 2020/06/28 12:00 a.m.•28 views

Pillow Buffer Overflow Vulnerability

Pillow is a Python based image processing library. A buffer overflow vulnerability exists in the libImaging/TiffDecode.c file in Pillow versions prior to 7.1.0. The vulnerability stems from a networked system or product that performs operations in memory without properly validating data boundarie...

7.8CVSS6.9AI score0.01129EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/06/28 12:00 a.m.•29 views

Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-21941)

Pillow is a Python based image processing library. An out-of-bounds read vulnerability exists in the libImaging/PcxDecode.c file in Pillow versions prior to 7.1.0. No details of the vulnerability are provided at this time...

5.5CVSS6.4AI score0.01114EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/06/28 12:00 a.m.•20 views

Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-21940)

Pillow is a Python based image processing library. An out-of-bounds read vulnerability exists in the libImaging/FliDecode.c file in Pillow versions prior to 7.1.0. No details of the vulnerability are provided at this time...

5.5CVSS6.4AI score0.0148EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/06/28 12:00 a.m.•20 views

Pillow Out-of-Bounds Read Vulnerability (CNVD-2021-21942)

Pillow is a Python based image processing library. An out-of-bounds read vulnerability exists in the libImaging/PcxDecode.c file in Pillow versions prior to 7.1.0. No details of the vulnerability are provided at this time...

5.5CVSS6.4AI score0.01432EPSS
SaveExploits0References1
Apple
Apple
•added 2020/06/25 7:44 a.m.•127 views

About the security content of watchOS 5.3 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS7.2AI score0.13806EPSS
SaveExploits21Affected Software1
Apple
Apple
•added 2020/06/25 7:44 a.m.•167 views

About the security content of tvOS 12.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS7.3AI score0.13806EPSS
SaveExploits25Affected Software1
OpenVAS
OpenVAS
•added 2020/06/23 12:00 a.m.•15 views

Fedora: Security Advisory for opencv (FEDORA-2020-f411f78fb0)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Apple
Apple
•added 2020/06/22 4:31 a.m.•94 views

About the security content of tvOS 13.3.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.3CVSS0.4AI score0.14839EPSS
SaveExploits2Affected Software1
Apple
Apple
•added 2020/06/19 10:46 a.m.•193 views

About the security content of iOS 13.4 and iPadOS 13.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...

9.8CVSS0.5AI score0.0466EPSS
SaveExploits2Affected Software2
Rows per page
Query Builder