Lucene search
+L

2673 matches found

Fedora
Fedora
•added 2019/11/30 12:58 a.m.•53 views

[SECURITY] Fedora 31 Update: python-pillow-6.1.0-4.fc31

Python image processing library, fork of the Python Imaging Library PIL This library provides extensive file format support, an efficient internal representation, and powerful image processing capabilities. There are four subpackages: tk tk interface, qt PIL image wrapper for Qt , devel developme...

7.5CVSS6.5AI score0.03128EPSS
SaveExploits0
CNVD
CNVD
•added 2019/11/21 12:00 a.m.•20 views

Huawei Nova 5i pro and Nova 5 Array Subscript Checksum Improperly Vulnerability

The Huawei Nova 5i pro and Nova 5 are both smartphones from the Chinese company Huawei Huawei. The security vulnerability in Huawei Nova 5i pro prior to 9.1.1.190 C00E190R6P2 and Nova 5 prior to 9.1.1.175 C00E170R3P2 stems from the system not adequately checking the value of values used as...

7.8CVSS6.9AI score0.00267EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/11/20 12:00 a.m.•33 views

Pillow has an unspecified vulnerability

Pillow is a Python-based image processing library. a security vulnerability exists in versions of Pillow prior to 6.2.0, which can be exploited by attackers to cause a denial of service...

7.5CVSS6.5AI score0.03128EPSS
SaveExploits0References1
OSV
OSV
•added 2019/11/19 1:22 p.m.•8 views

OPENSUSE-SU-2019:2529-1 Security update for libjpeg-turbo

This update for libjpeg-turbo fixes the following issues: - CVE-2019-2201: Several integer overflow issues and subsequent segfaults occurred in libjpeg-turbo, when attempting to compress or decompress gigapixel images. bsc1156402 This update was imported from the SUSE:SLE-15:Update update project...

9.3CVSS7.9AI score0.02461EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2019/11/19 12:00 a.m.•15 views

The vulnerability of the ReadOneJNGImage function (coders/png.c) in the cross-platform library for working with graphics, GraphicsMagick, allows a hacker to induce a service failure.

The vulnerability of the ReadOneJNGImage function coders/png.c in the cross-platform library for working with graphics, GraphicsMagick, is related to errors in processing JPEG-formatted images. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

7.8CVSS6.8AI score0.0133EPSS
SaveExploits0References7Affected Software2
Tenable Nessus
Tenable Nessus
•added 2019/11/06 12:00 a.m.•50 views

Mozilla Firefox ESR < 24.2 Multiple Vulnerabilities

Binary data 701241.prm...

10CVSS7.7AI score0.11076EPSS
SaveExploits13References27
Github Security Blog
Github Security Blog
•added 2019/10/22 2:40 p.m.•38 views

DOS attack in Pillow when processing specially crafted image files

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image...

7.5CVSS6.5AI score0.03128EPSS
SaveExploits0References17Affected Software1
OpenVAS
OpenVAS
•added 2019/10/22 12:00 a.m.•103 views

Debian: Security Advisory (DLA-1968-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.04104EPSS
SaveExploits3References3
OSV
OSV
•added 2019/10/04 10:15 p.m.•31 views

CVE-2019-16865

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image...

7.5CVSS7.4AI score
SaveExploits0References11
CVE
CVE
•added 2019/10/04 9:09 p.m.•463 views

CVE-2019-16865

Pillow CVE-2019-16865 affects Pillow

7.5CVSS6.5AI score0.03128EPSS
SaveExploits0References11Affected Software1
Debian CVE
Debian CVE
•added 2019/10/04 9:09 p.m.•38 views

CVE-2019-16865

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image...

7.5CVSS6.5AI score0.03128EPSS
SaveExploits0
Mend
Mend
•added 2019/10/04 9:09 p.m.•4 views

CVE-2019-16865

An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image...

8.7CVSS0.03128EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
•added 2019/10/04 12:00 a.m.•2 views

PT-2019-20130

Name of the Vulnerable Software and Affected Versions Pillow versions prior to 6.2.0 Description An issue was discovered in the library when reading specially crafted invalid image files. This can cause the library to either allocate very large amounts of memory or take an extremely long period o...

5.7AI score
SaveExploits0References12
Tenable Nessus
Tenable Nessus
•added 2019/09/30 12:00 a.m.•30 views

Debian DLA-1934-1 : cimg security update

Several issues have been found in cimg, a powerful image processing library. CVE-2019-1010174 is related to a missing string sanitization on URLs, which might result in a command injection when loading a special crafted image. The other CVEs are about heap-based buffer over-reads or double frees...

9.8CVSS7.6AI score0.04974EPSS
SaveExploits7References10
Debian
Debian
•added 2019/09/28 9:42 a.m.•282 views

[SECURITY] [DLA 1934-1] cimg security update

Package : cimg Version : 1.5.9+dfsg-1+deb8u1 CVE ID : CVE-2018-7588 CVE-2018-7589 CVE-2018-7637 CVE-2018-7638 CVE-2018-7639 CVE-2018-7640 CVE-2018-7641 CVE-2019-1010174 Several issues have been found in cimg, a powerful image processing library. CVE-2019-1010174 is related to a missing string...

9.8CVSS8.6AI score0.04974EPSS
SaveExploits7
NVD
NVD
•added 2019/09/25 6:15 p.m.•36 views

CVE-2019-16887

In IrfanView 4.53, Data from a Faulting Address controls a subsequent Write Address starting at image00400000+0x000000000001dcfc...

7.8CVSS7.6AI score0.01913EPSS
SaveExploits1References1
FreeBSD
FreeBSD
•added 2019/09/24 12:00 a.m.•41 views

Pillow -- Allocation of resources without limits or throttling

Mitre reports: An issue was discovered in Pillow before 6.2.0. When reading specially crafted invalid image files, the library can either allocate very large amounts of memory or take an extremely long period of time to process the image...

7.5CVSS6.5AI score0.03128EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/09/23 11:46 a.m.•39 views

CVE-2019-16710

ImageMagick 7.0.8-35 has a memory leak in coders/dot.c, as demonstrated by AcquireMagickMemory in MagickCore/memory.c...

7.7AI score0.02485EPSS
SaveExploits1References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/09/19 8:59 a.m.•19 views

Multiple integer overflow vulnerabilities in LINE(Android)

Overview LINEAndroid provided by LINE Corporation contains multiple integer overflow vulnerabilities CWE-190 listed below. Integer overflow vulnerability in processing images using apng-drawable - CVE-2019-6007 Integer overflow vulnerability in processing images - CVE-2019-6010 LINE Corporation...

8.8CVSS7.5AI score0.02028EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/09/19 12:00 a.m.•180 views

JVN#97845465: Multiple integer overflow vulnerabilities in LINE(Android)

LINEAndroid provided by LINE Corporation contains multiple integer overflow vulnerabilities CWE-190 listed below. Integer overflow vulnerability in processing images using apng-drawable - CVE-2019-6007 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L| Base...

8.8CVSS8.9AI score0.02028EPSS
SaveExploits0
Rows per page
Query Builder