python-pillow

Records319All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical40CVSS 9.0–10.0

CVSS high143CVSS 7.0–8.9

Exploited now

python-pillow records in CISA KEV

No python-pillow vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Python 140 records HIGH Pillow 111 records HIGH Urllib3 22 records MEDIUM Requests 6 records MEDIUM Setuptools 4 records HIGH Keyring 3 records LOW Black 2 records MEDIUM Pyxdg 2 records LOW

Records

2 records in Pyxdg · all components

TI-2019-09550 CVE-2019-12761 · GHSA-r6v3-hpxj-r8rv

A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a…

LOW 37

A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file.

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.02105 Published 2019-06-06 Partial fix · 0.26 CWE-94

TI-2014-01264 CVE-2014-1624 · GHSA-7372-q459-jxhr

Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25…

LOW 16

Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned locati…

CVSS 2.0LOW 3.3 Local No auth Interaction — EPSS 0.00315 Published 2014-01-28 Fixed in 0.26 CWE-59

Open these records in search →

Critical	40
High	143
Medium	120
Low	16
No CVSS	0