pythonware records

3 published records for vendor pythonware.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
43Plan	CVE-2014-3007No exploit	Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharactpython · pillow · CWE-78 pre-auth RCE Command injection	Critical10.0	—	11.6%	Apr 27, 2014
17Monitor	CVE-2014-1932No exploit	The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, apython · pillow · CWE-59	Medium4.4	—	0.5%	Apr 17, 2014
8Monitor	CVE-2014-1933No exploit	The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses thpython · pillow · CWE-264	Low2.1	—	0.5%	Apr 17, 2014

CVE-2014-3007
43Plan
Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharact
CriticalCVSS 10.0No exploitEPSS 12%
- pre-auth RCE
- Command injection
python · pillowApr 27, 2014
CVE-2014-1932
17Monitor
The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, a
MediumCVSS 4.4No exploitEPSS 0%
python · pillowApr 17, 2014
CVE-2014-1933
8Monitor
The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses th
LowCVSS 2.1No exploitEPSS 0%
python · pillowApr 17, 2014