Lucene search
+L

834 matches found

Amazon
Amazon
•added 2024/04/02 12:00 a.m.•11 views

Medium: python-pillow

Issue Overview: Affected versions of this package are vulnerable to Denial of Service DoS when using arbitrary strings as text input and the number of characters passed into PIL.ImageFont.ImageFont.getmask is over a certain limit. This can lead to a system crash. Affected versions of this package...

6.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/04/01 12:00 a.m.•60 views

Amazon Linux 2 : python-pillow (ALAS-2024-2508)

The version of python-pillow installed on the remote host is prior to 2.0.0-23.gitd1c6db8. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2508 advisory. An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory t...

7.5CVSS7AI score0.01131EPSS
SaveExploits0References4
Amazon
Amazon
•added 2024/04/01 12:00 a.m.•49 views

Medium: python-pillow

Issue Overview: An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process a given task, potentially causing a service to crash by having it run out of memory. This occurs for truetype in ImageFont when textlength in an ImageDraw...

7.5CVSS8AI score0.01131EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/03/21 12:00 a.m.•25 views

EulerOS Virtualization 2.11.1 : python-pillow (EulerOS-SA-2024-1420)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process ...

7.5CVSS6.6AI score0.01131EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/21 12:00 a.m.•23 views

EulerOS Virtualization 2.11.0 : python-pillow (EulerOS-SA-2024-1448)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process ...

7.5CVSS6.6AI score0.01131EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/21 12:00 a.m.•17 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2024-1448)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01131EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/14 12:00 a.m.•15 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2024-1389)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01131EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/14 12:00 a.m.•9 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2024-1368)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01131EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/14 12:00 a.m.•22 views

EulerOS Virtualization 2.10.0 : python-pillow (EulerOS-SA-2024-1389)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process ...

7.5CVSS6.6AI score0.01131EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/14 12:00 a.m.•28 views

EulerOS Virtualization 2.10.1 : python-pillow (EulerOS-SA-2024-1368)

According to the versions of the python-pillow package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in Pillow before 10.0.0. It is a Denial of Service that uncontrollably allocates memory to process ...

7.5CVSS6.6AI score0.01131EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/12 12:00 a.m.•18 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2024-1225)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.1AI score0.01703EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•39 views

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2024-1247)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than...

9.8CVSS6.9AI score0.03334EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/12 12:00 a.m.•34 views

EulerOS 2.0 SP11 : python-pillow (EulerOS-SA-2024-1225)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than...

9.8CVSS6.9AI score0.03334EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/12 12:00 a.m.•21 views

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2024-1247)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.1AI score0.01703EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2024/03/08 12:00 a.m.•136 views

RHEL 8 / 9 : Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update (Important) (RHSA-2024:1057)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:1057 advisory. Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT...

8.1CVSS7.1AI score0.01606EPSS
SaveExploits5References20
OpenVAS
OpenVAS
•added 2024/03/05 12:00 a.m.•27 views

CentOS: Security Advisory for python-pillow (CESA-2024:0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.01131EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/05 12:00 a.m.•49 views

CentOS: Security Advisory for python-pillow (CESA-2024:0857)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.1AI score0.01703EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•34 views

openSUSE Security Advisory (SUSE-SU-2024:0205-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.1CVSS7.1AI score0.01703EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•12 views

openSUSE: Security Advisory for python (SUSE-SU-2023:4465-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.01131EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•25 views

openSUSE: Security Advisory for python (SUSE-SU-2023:4528-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.9AI score0.01131EPSS
SaveExploits0References2
Rows per page
Query Builder