310 matches found
Calibre-Web 安全漏洞
Calibre-Web is a web application for browsing, reading and downloading eBooks from the Calibre database. A security vulnerability exists in Calibre-Web versions prior to 0.6.20, which stems from a weak password policy in the program...
CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web
Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...
CVE-2023-2106: Weak Password Requirements
Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20...
PT-2023-12780
Name of the Vulnerable Software and Affected Versions calibre-web versions prior to 0.6.20 Description The issue is related to improper restriction of excessive authentication attempts in the GitHub repository janeczku/calibre-web. Recommendations For versions prior to 0.6.20, update to version...
Calibre-Web SQL Injection Vulnerability
Calibre-Web is a Web application for browsing, reading and downloading eBooks from the Calibre database.A SQL injection vulnerability exists in versions prior to Calibre-Web 0.6.18.The vulnerability stems from the application's lack of validation of externally entered SQL statements, which can be...
GHSA-8PPF-X4GR-2X7G SQL injection in calibreweb
Calibre-Web before 0.6.18 allows user table SQL Injection...
SQL injection in calibreweb
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
Sql injection
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
CVE-2022-30765 affects Calibre-Web prior to version 0.6.18. The issue is a SQL Injection in the user table due to lack of validation of externally supplied SQL statements, allowing attackers to execute arbitrary SQL commands and access sensitive data within the Calibre-Web database. Public refere...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
PT-2022-20301
Name of the Vulnerable Software and Affected Versions Calibre-Web versions prior to 0.6.18 Description The issue allows for SQL Injection in the user table. Recommendations For versions prior to 0.6.18, update to version 0.6.18 or later to resolve the issue...
Calibre-Web SQL注入漏洞
Calibre-Web is a Web application for browsing, reading and downloading eBooks from the Calibre database.A SQL injection vulnerability exists in versions prior to Calibre-Web 0.6.18.The vulnerability stems from the application's lack of validation of externally entered SQL statements, which can be...
CVE-2022-0990
Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.18...
CVE-2022-0990
Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.18...
Server side request forgery (ssrf)
Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.18...
CVE-2022-0990
Calibre-Web (janeczku/calibre-web) is affected by a Server-Side Request Forgery (SSRF) vulnerability disclosed as CVE-2022-0990 in versions before 0.6.18. The issue is evidenced across multiple sources (NVD, Red Hat, Veracode, Huntr, CVE listings) describing SSRF in this project. Veracode notes t...