Lucene search
K

15 matches found

SUSE CVE
SUSE CVE
added 2026/02/10 12:23 a.m.4 views

SUSE CVE-2026-25636

calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to...

8.2CVSS5.8AI score0.00209EPSS
Exploits1References3
RedhatCVE
RedhatCVE
added 2026/02/08 1:21 a.m.3 views

CVE-2026-25636

A flaw was found in Calibre, an e-book manager. This path traversal vulnerability allows a malicious EPUB electronic publication file to corrupt arbitrary files on the system that the Calibre process has write access to. During EPUB conversion, Calibre incorrectly resolves file paths, enabling an...

8.2CVSS5.6AI score0.00209EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2026/02/07 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-25636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrar...

8.2CVSS6AI score0.00209EPSS
Exploits1References2
NVD
NVD
added 2026/02/06 9:16 p.m.5 views

CVE-2026-25636

calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to...

8.2CVSS0.00209EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2026/02/06 9:16 p.m.5 views

CVE-2026-25636

calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to...

8.2CVSS6AI score0.00209EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/02/06 8:7 p.m.24 views

CVE-2026-25636 calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution

calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to...

8.2CVSS0.00209EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2026/02/06 8:7 p.m.5 views

CVE-2026-25636 calibre has a Path Traversal Leading to Arbitrary File Corruption and Code Execution

calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to...

8.2CVSS5.7AI score0.00209EPSS
Exploits1References2
EUVD
EUVD
added 2026/02/06 8:7 p.m.4 views

EUVD-2026-5597

calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to...

8.2CVSS5.5AI score0.00209EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/02/06 8:7 p.m.4 views

CVE-2026-25636

calibre is an e-book manager. In 9.1.0 and earlier, a path traversal vulnerability in Calibre's EPUB conversion allows a malicious EPUB file to corrupt arbitrary existing files writable by the Calibre process. During conversion, Calibre resolves CipherReference URI from META-INF/encryption.xml to...

8.2CVSS5.5AI score0.00209EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2026/02/06 8:7 p.m.15 views

CVE-2026-25636

Calibre CVE-2026-25636 is a path-traversal vulnerability in EPUB conversion that, in 9.1.0 and earlier, allows a malicious EPUB to cause arbitrary files writable by the Calibre process to be corrupted by resolving CipherReference URIs from META-INF/encryption.xml to absolute paths outside the ext...

8.2CVSS5.5AI score0.00209EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2026/02/06 12:0 a.m.6 views

Calibre 代码注入漏洞

Calibre is an open-source, free tool developed by Kovid Goyal, a personal developer from India. It serves as a comprehensive e-book reading management and format conversion tool. Versions of Calibre 9.1.0 and earlier had a code injection vulnerability. This vulnerability stemmed from path travers...

8.2CVSS5.9AI score0.00209EPSS
Exploits1References3
NVD
NVD
added 2024/12/17 7:15 p.m.7 views

CVE-2024-56139

pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems...

6.9CVSS0.00384EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/12/17 6:32 p.m.7 views

CVE-2024-56139 A stack overflow Segmentation Fault (SEGV) and Memory Leak in pdftools

pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems...

6.9CVSS6.8AI score0.00384EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/17 6:32 p.m.21 views

CVE-2024-56139 A stack overflow Segmentation Fault (SEGV) and Memory Leak in pdftools

pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems...

6.9CVSS0.00384EPSS
Exploits0References1
OSV
OSV
added 2024/12/17 6:32 p.m.3 views

CVE-2024-56139 A stack overflow Segmentation Fault (SEGV) and Memory Leak in pdftools

pdftools is a high level tools to convert PDF files to ePUB formats. In versions up to and including 0.5.0 maliciously crafted epub files can cause a stack overflow leading to a crash. This issue has not yet been addressed and users are advised to avoid untrusted input to their systems...

6.9CVSS6.9AI score0.00384EPSS
Exploits0References1
Rows per page
Query Builder