732 matches found
CVE-2022-2525 Improper Restriction of Excessive Authentication Attempts in janeczku/calibre-web
Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20...
PT-2023-12780
Name of the Vulnerable Software and Affected Versions calibre-web versions prior to 0.6.20 Description The issue is related to improper restriction of excessive authentication attempts in the GitHub repository janeczku/calibre-web. Recommendations For versions prior to 0.6.20, update to version...
SUSE CVE-2016-10187
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript...
SUSE CVE-2018-7889
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call...
SUSE CVE-2021-44686
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...
CVE-2018-7889
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call...
Calibre-Web SQL Injection Vulnerability
Calibre-Web is a Web application for browsing, reading and downloading eBooks from the Calibre database.A SQL injection vulnerability exists in versions prior to Calibre-Web 0.6.18.The vulnerability stems from the application's lack of validation of externally entered SQL statements, which can be...
GHSA-8PPF-X4GR-2X7G SQL injection in calibreweb
Calibre-Web before 0.6.18 allows user table SQL Injection...
SQL injection in calibreweb
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
Sql injection
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
CVE-2022-30765 affects Calibre-Web prior to version 0.6.18. The issue is a SQL Injection in the user table due to lack of validation of externally supplied SQL statements, allowing attackers to execute arbitrary SQL commands and access sensitive data within the Calibre-Web database. Public refere...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
CVE-2022-30765
Calibre-Web before 0.6.18 allows user table SQL Injection...
PT-2022-20301
Name of the Vulnerable Software and Affected Versions Calibre-Web versions prior to 0.6.18 Description The issue allows for SQL Injection in the user table. Recommendations For versions prior to 0.6.18, update to version 0.6.18 or later to resolve the issue...
Calibre-Web SQL注入漏洞
Calibre-Web is a Web application for browsing, reading and downloading eBooks from the Calibre database.A SQL injection vulnerability exists in versions prior to Calibre-Web 0.6.18.The vulnerability stems from the application's lack of validation of externally entered SQL statements, which can be...
CVE-2022-0990
Server-Side Request Forgery SSRF in GitHub repository janeczku/calibre-web prior to 0.6.18...