Pillow Schwachstellen

Zeitverlauf

Version

8.0	17
8.1	14
6.2.0	8
6.2.1	8
7.0	4

Massnahmen

Official Fix	47
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	2

Ausnutzbarkeit

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	49

Zugriffsart

Not Defined	0
Physical	0
Local	9
Adjacent	28
Network	12

Authentisierung

Not Defined	0
High	0
Low	28
None	21

Benutzeraktivität

Not Defined	0
Required	15
None	34

C3BM Index

Vergangenes Jahr

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	7
≤5	4
≤6	22
≤7	7
≤8	8
≤9	0
≤10	1

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	7
≤5	4
≤6	23
≤7	7
≤8	7
≤9	0
≤10	1

VulDB

≤1	0
≤2	0
≤3	0
≤4	19
≤5	1
≤6	21
≤7	6
≤8	1
≤9	0
≤10	1

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	7
≤7	3
≤8	14
≤9	6
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	18
<2k	15
<5k	16
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit heute

<1k	49
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploitmarktvolumen

Vergangenes Jahr

🔴 CTI Aktivitäten

Affected Versions (28): 2.3, 2.3.1, 2.5, 2.5.1, 2.5.2, 2.6, 2.6.1, 3.0, 3.1, 3.1.1, 3.3, 3.3.1, 6.0, 6.1, 6.2, 6.2.1, 6.2.2, 7.0, 8.0, 8.1, 8.3, 8.3.1, 9.0, 9.1, 9.2, 10.0, 10.1, 10.2

Softwaretyp: Programming Language Software

Veröffentlicht	Base	Temp	Schwachstelle	0day	Heute	Aus	Mas	CTI	CVE
02.04.2024	5.5	5.3	python-pillow _imagingcms.c Pufferüberlauf	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2024-28219
20.01.2024	6.8	6.7	Pillow PIL.ImageMath.eval erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-50447
03.11.2023	5.5	5.4	Pillow truetype in ImageFont Denial of Service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.06	CVE-2023-44271
14.11.2022	5.5	5.4	Pillow Denial of Service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-45199
14.11.2022	5.5	5.4	Pillow GIF Data Denial of Service	$0-$5k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2022-45198
25.05.2022	5.5	5.3	Pillow TGA Image File TgaRleDecode.c Pufferüberlauf	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-30595
28.03.2022	4.6	4.4	Pillow erweiterte Rechte	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-24303
10.01.2022	5.5	5.3	Pillow path.c path_getbbox Pufferüberlauf	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-22816
10.01.2022	5.5	5.3	Pillow path.c path_getbbox Privilege Escalation	$0-$5k	Wird berechnet	Not Defined	Official Fix	0.00	CVE-2022-22815
10.01.2022	3.5	3.4	Pillow PIL.ImageMath.eval Information Disclosure	$0-$5k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2022-22817

39 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 39 results.

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!