Pythonware

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Pythonware records in CISA KEV

No Pythonware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Python Imaging Library 3 records MEDIUM

Records

3 records in Python Imaging Library · all components

TI-2014-02401 CVE-2014-3007 · GHSA-8m9x-pxwq-j236

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers…

MEDIUM 55

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10356 Published 2014-04-27 Partial fix · 2.5.0 CWE-78

TI-2014-01507 CVE-2014-1932 · GHSA-x895-2wrm-hvp7

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in…

LOW 21

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlie…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00496 Published 2014-04-17 Partial fix · 2.3.1 CWE-59

TI-2014-01508 CVE-2014-1933 · GHSA-r854-96gq-rfg3

The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library…

LOW 12

The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes it easier for local…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00451 Published 2014-04-17 Partial fix · 2.3.1 CWE-264

Open these records in search →

Critical	1
High	0
Medium	1
Low	1
No CVSS	0