273 matches found
CVE-2023-2106 Weak Password Requirements in janeczku/calibre-web
Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20...
Calibre-Web 安全漏洞
Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in Calibre-Web versions prior to 0.6.20, which stems from a weak password policy in the program...
Calibre-Web 安全漏洞
Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in Calibre-Web versions prior to 0.6.20, which stems from an improper restriction on excessive authentication attempts...
PT-2023-17851
Name of the Vulnerable Software and Affected Versions calibre-web versions prior to 0.6.20 Description The issue concerns weak password requirements in the GitHub repository janeczku/calibre-web. Recommendations For versions prior to 0.6.20, update to version 0.6.20 or later to resolve the issue...
CVE-2023-2106 Weak Password Requirements in janeczku/calibre-web
Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20...
CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web
Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...
CVE-2023-2106
CVE-2023-2106 affects Calibre-Web (janeczku/calibre-web) versions prior to 0.6.20. The root cause is a weak password policy implemented in the project, allowing login credentials that do not meet stronger complexity requirements. Documented impact indicates potential exposure of credentials and u...
Calibre-Web SQL Injection Vulnerability
Calibre-Web is a Web application for browsing, reading and downloading eBooks from the Calibre database.A SQL injection vulnerability exists in versions prior to Calibre-Web 0.6.18.The vulnerability stems from the application's lack of validation of externally entered SQL statements, which can be...
SQL injection in calibreweb
Calibre-Web before 0.6.18 allows user table SQL Injection...
GHSA-8PPF-X4GR-2X7G SQL injection in calibreweb
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
Sql injection
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
CVE-2022-30765 affects Calibre-Web prior to version 0.6.18. The issue is a SQL Injection in the user table due to lack of validation of externally supplied SQL statements, allowing attackers to execute arbitrary SQL commands and access sensitive data within the Calibre-Web database. Public refere...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
PT-2022-20301
Name of the Vulnerable Software and Affected Versions Calibre-Web versions prior to 0.6.18 Description The issue allows for SQL Injection in the user table. Recommendations For versions prior to 0.6.18, update to version 0.6.18 or later to resolve the issue...
Calibre-Web SQL注入漏洞
Calibre-Web is a Web application for browsing, reading and downloading eBooks from the Calibre database.A SQL injection vulnerability exists in versions prior to Calibre-Web 0.6.18.The vulnerability stems from the application's lack of validation of externally entered SQL statements, which can be...