Lucene search
+L

273 matches found

Cvelist
Cvelist
added 2022/01/17 12:35 p.m.31 views

CVE-2021-4164 Cross-Site Request Forgery (CSRF) in janeczku/calibre-web

calibre-web is vulnerable to Cross-Site Request Forgery CSRF...

7.6CVSS9AI score0.0054EPSS
SaveExploits1References2
NVD
NVD
added 2022/01/17 10:15 a.m.27 views

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

9.8CVSS0.01375EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/17 10:15 a.m.9 views

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

9.8CVSS7.2AI score0.01375EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/17 10:15 a.m.19 views

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors...

9.8CVSS6.8AI score
SaveExploits0References2
Prion
Prion
added 2022/01/17 10:15 a.m.17 views

Code injection

calibre-web is vulnerable to Business Logic Errors...

7.5CVSS9.4AI score0.01375EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/01/17 9:45 a.m.90 views

CVE-2021-4171

Calibre-web (web application) is affected by CVE-2021-4171 due to Business Logic Errors. The CVSS data indicates high to critical impact (C/H/I/A) with network access, no authentication, and no user interaction required. The vulnerability affects core logic of calibre-web (exact function/file not...

9.8CVSS8.6AI score0.01375EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/01/17 9:45 a.m.37 views

CVE-2021-4171 Business Logic Errors in janeczku/calibre-web

calibre-web is vulnerable to Business Logic Errors...

7.7CVSS9.7AI score0.01375EPSS
SaveExploits1References2
Huntr
Huntr
added 2022/01/17 3:3 a.m.18 views

Cross-site Scripting (XSS) - Reflected in janeczku/calibre-web

Description There is a reflected XSS vulnerability on the site calibre-web. Proof of Concept 1. go to the calibre e-book management 2. create a new book give the title name 3. and give the title sort name 4. save and go to the website 5.go to Author 6.press one of the books 7. then right click an...

4.3CVSS1.1AI score0.00853EPSS
SaveExploits1
CNVD
CNVD
added 2022/01/17 12:0 a.m.32 views

Calibre-Web Cross-Site Scripting Vulnerability (CNVD-2022-21489)

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database.A vulnerability exists in Calibre-Web cross-site scripting that is vulnerable to incorrect neutralization of input during web page generation. No details of the vulnerability are currently...

7.3CVSS1.9AI score0.00802EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/01/17 12:0 a.m.16 views

calibre-web 安全漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in calibre-web that stems from the fact that calibre-web is prone to business logic errors...

9.8CVSS7.5AI score0.01375EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/01/17 12:0 a.m.13 views

PT-2022-11465

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Business Logic Errors. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was...

9.8CVSS7.1AI score0.01375EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2022/01/17 12:0 a.m.7 views

Calibre-Web 跨站请求伪造漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A cross-site request forgery vulnerability exists in calibre-web, which stems from the software's lack of validation of cross-site request forgery tokens...

8.8CVSS7.2AI score0.0054EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2022/01/17 12:0 a.m.3 views

PT-2022-11450

Name of the Vulnerable Software and Affected Versions calibre-web affected versions not specified Description The issue is related to Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application. No information is provided...

8.8CVSS7.1AI score0.0054EPSS
SaveExploits1References13
NVD
NVD
added 2022/01/16 9:15 p.m.12 views

CVE-2021-4170

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.3CVSS0.00802EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/01/16 9:15 p.m.8 views

CVE-2021-4170

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.3CVSS6.6AI score0.00802EPSS
SaveExploits1References3
OSV
OSV
added 2022/01/16 9:15 p.m.9 views

CVE-2021-4170

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

5.4CVSS6.7AI score
SaveExploits0References2
Prion
Prion
added 2022/01/16 9:15 p.m.16 views

Cross site scripting

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

3.5CVSS5.4AI score0.00802EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2022/01/16 8:55 p.m.92 views

CVE-2021-4170

CVE-2021-4170 affects the Calibre-Web web application, with vulnerability described as Improper Neutralization of Input During Web Page Generation (Cross-site Scripting). The provided documents consistently attribute XSS to insufficient neutralization of user input during page generation, affecti...

7.3CVSS5.7AI score0.00802EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2022/01/16 8:55 p.m.20 views

CVE-2021-4170 Cross-site Scripting (XSS) - Stored in janeczku/calibre-web

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.3CVSS5.7AI score0.00802EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2022/01/16 12:0 a.m.7 views

Calibre-Web 跨站脚本漏洞

Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database.A vulnerability exists in Calibre-Web cross-site scripting that is vulnerable to incorrect neutralization of input during web page generation. No details of the vulnerability are currently...

7.3CVSS5.2AI score0.00802EPSS
SaveExploits1References3
Rows per page
Query Builder