Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 96
Restablecer filtrosThe (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (P
Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.
The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
Path traversal in Pillow
Infinite loop in Pillow
Arbitrary expression injection in Pillow
Out-of-bounds Read in Pillow
Improper Initialization in Pillow
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
Uncontrolled Resource Consumption in pillow
Buffer Overflow in Pillow
Insufficient Verification of Data Authenticity in Pillow
Uncontrolled Resource Consumption in Pillow
Potential infinite loop in Pillow
Pillow Out-of-bounds Read vulnerability
Out-of-bounds Read in Pillow
Pillow denial of service
Uncontrolled Resource Consumption in pillow
Out of bounds read in Pillow
Regular Expression Denial of Service (ReDoS) in Pillow
Out of bounds read in Pillow
Out-of-bounds Write in Pillow
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.