Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Pythonware Clear all filters
TI-2014-02401 CVE-2014-3007 · GHSA-8m9x-pxwq-j236

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers…

Priority MEDIUM 55

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10356 Published 2014-04-27 Partial fix · 2.5.0 CWE-78
TI-2014-01507 CVE-2014-1932 · GHSA-x895-2wrm-hvp7

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in…

Priority LOW 21

The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (PIL) 1.1.7 and earlie…

CVSS 2.0MEDIUM 4.4 Local No auth Interaction — EPSS 0.00496 Published 2014-04-17 Partial fix · 2.3.1 CWE-59