https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:41:44.176300+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-pillow-cve-2014-3007 BREW-pillow-CVE-2014-3007 — Pillow command injection 2026-10-05T20:41:44.293209+00:00

Affected: Homebrew: pillow

Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.5.0 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

 https://cve.radiocsirt.org/vuln/euvd-2026-181239 EUVD-2026-181239 2026-10-05T20:41:44.293270+00:00 EUVD-2026-181239 https://cve.radiocsirt.org/vuln/fkie_cve-2014-3007 fkie_cve-2014-3007 2026-10-05T20:41:44.293287+00:00

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

 https://cve.radiocsirt.org/vuln/ghsa-8m9x-pxwq-j236 GHSA-8m9x-pxwq-j236 — Pillow command injection 2026-10-05T20:41:44.293311+00:00

Affected: PyPI: pillow

Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.5.0 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

 https://cve.radiocsirt.org/vuln/gsd-2014-3007 gsd-2014-3007 2026-10-05T20:41:44.293332+00:00 gsd-2014-3007 https://cve.radiocsirt.org/vuln/pysec-2014-87 PYSEC-2014-87 2026-10-05T20:41:44.293344+00:00

Affected: PyPI: pillow

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-3007 UBUNTU-CVE-2014-3007 2026-10-05T20:41:44.293361+00:00

Affected: Ubuntu:14.04:LTS: pillow

Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possibly JpegImagePlugin.py.