Lucene search
+L

9983 matches found

OSV
OSV
added 2022/01/10 2:12 p.m.6 views

ALPINE-CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

6.5CVSS7.2AI score0.01957EPSS
SaveExploits0References1
OSV
OSV
added 2022/01/10 2:12 p.m.1 views

DEBIAN-CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS6.7AI score0.02556EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.9 views

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

6.5CVSS6.8AI score0.01957EPSS
SaveExploits0References6
OSV
OSV
added 2022/01/10 2:12 p.m.6 views

UBUNTU-CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS6.7AI score0.02556EPSS
SaveExploits0References5
PyPA
PyPA
added 2022/01/10 2:12 p.m.11 views

PYSEC-2022-8

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS7AI score0.02556EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/10 2:12 p.m.11 views

CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

6.5CVSS6.7AI score0.02556EPSS
SaveExploits0References6
UbuntuCve
UbuntuCve
added 2022/01/10 2:12 p.m.37 views

CVE-2022-22816

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

6.5CVSS6.9AI score0.01957EPSS
SaveExploits0References4
PyPA
PyPA
added 2022/01/10 2:12 p.m.9 views

PYSEC-2022-9

pathgetbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path...

6.5CVSS7.2AI score0.01957EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.6 views

Pillow 安全漏洞

Pillow is a Python based image processing library. A security vulnerability exists in Pillow before 9.0.0 that stems from pathgetbbox in path.c incorrectly initializing ImagePath...

6.5CVSS6.7AI score0.02556EPSS
SaveExploits0References15
CNNVD
CNNVD
added 2022/01/10 12:00 a.m.7 views

Pillow 缓冲区错误漏洞

Pillow is a Python-based image processing library. An out-of-bounds read vulnerability exists in versions of Pillow prior to 9.0.0, which stems from a buffer over-read in pathgetbbox in path.c during initialization of ImagePath. An attacker could exploit this vulnerability to read memory-sensitiv...

6.5CVSS5.9AI score0.01957EPSS
SaveExploits0References24
Cvelist
Cvelist
added 2022/01/07 12:00 a.m.31 views

CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

8.1AI score0.02556EPSS
SaveExploits0References5
OSV
OSV
added 2022/01/07 12:00 a.m.31 views

CVE-2022-22815

pathgetbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path...

3.2AI score
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/01/06 10:18 p.m.43 views

Missing Initialization of Resource in pnet

An issue was discovered in the pnet crate before 0.27.2 for Rust. There is a segmentation fault upon attempted dereference of an uninitialized descriptor because of an erroneous IcmpTransportChannelIterator compiler optimization...

7.5CVSS2.1AI score0.00958EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/01/06 1:15 p.m.4 views

CVE-2021-45458

Apache Kylin provides encryption classes PasswordPlaceholderConfigurer to help users encrypt their passwords. In the encryption algorithm used by this encryption class, the cipher is initialized with a hardcoded key and IV. If users use class PasswordPlaceholderConfigurer to encrypt their passwor...

7.5CVSS7AI score0.0208EPSS
SaveExploits0References4Affected Software1
Zero Day Initiative
Zero Day Initiative
added 2022/01/06 12:00 a.m.26 views

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

3.3CVSS4.7AI score0.00248EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/01/06 12:00 a.m.10 views

PT-2022-12364 · Apache · Apache Kylin

Name of the Vulnerable Software and Affected Versions: Apache Kylin versions 2.6.6 and prior Apache Kylin versions 3.1.2 and prior Apache Kylin versions 4.0.0 and prior Description: Apache Kylin provides encryption classes PasswordPlaceholderConfigurer to help users encrypt their passwords. In th...

7.5CVSS7.4AI score0.0208EPSS
SaveExploits0References11
NVD
NVD
added 2022/01/03 8:15 a.m.32 views

CVE-2021-30274

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

8.4CVSS0.00154EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/01/03 8:15 a.m.12 views

CVE-2021-30274

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

8.4CVSS7AI score0.00154EPSS
SaveExploits0References2
Prion
Prion
added 2022/01/03 8:15 a.m.30 views

Integer overflow

Possible integer overflow in access control initialization interface due to lack and size and address validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and...

7.2CVSS7.8AI score0.00154EPSS
SaveExploits0References1
Prion
Prion
added 2022/01/03 8:15 a.m.27 views

Double free

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon...

7.2CVSS7.9AI score0.00154EPSS
SaveExploits0References1
Rows per page
Query Builder