UBUNTU-CVE-2024-7009

Unsanitized user-input in Calibre = 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database...

CVE-2024-6782

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2024-7008

Unsanitized user-input in Calibre = 7.15.0 allow attackers to perform reflected cross-site scripting...

UBUNTU-CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

UBUNTU-CVE-2024-6782

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-7009 Calibre SQL Injection

Unsanitized user-input in Calibre = 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database...

CVE-2024-7009 Calibre SQL Injection

Unsanitized user-input in Calibre = 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database...

CVE-2024-7009 Calibre SQL Injection

Unsanitized user-input in Calibre = 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database...

CVE-2024-7009

CVE-2024-7009 affects Calibre

CVE-2024-7009

Unsanitized user-input in Calibre = 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database...

CVE-2024-7008

Unsanitized user-input in Calibre = 7.15.0 allow attackers to perform reflected cross-site scripting...

CVE-2024-7008

Calibre

CVE-2024-7008 Calibre Reflected Cross-Site Scripting (XSS)

Unsanitized user-input in Calibre = 7.15.0 allow attackers to perform reflected cross-site scripting...

CVE-2024-7008 Calibre Reflected Cross-Site Scripting (XSS)

Unsanitized user-input in Calibre = 7.15.0 allow attackers to perform reflected cross-site scripting...

CVE-2024-7008 Calibre Reflected Cross-Site Scripting (XSS)

Unsanitized user-input in Calibre = 7.15.0 allow attackers to perform reflected cross-site scripting...

CVE-2024-6782 Calibre Remote Code Execution

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2024-6782 Calibre Remote Code Execution

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2024-6782 Calibre Remote Code Execution

Improper access control in Calibre 6.9.0 7.14.0 allow unauthenticated attackers to achieve remote code execution...

CVE-2024-6782

CVE-2024-6782 is an improper access-control vulnerability in Calibre versions 6.9.0 through 7.14.0 that allows unauthenticated attackers to achieve remote code execution , typically via Calibre’s content server (PoC evidence exists). Connected advisories and Nessus plugins corroborate unauthentic...