Lucene search
+L

6 matches found

PyPA
PyPA
•added 2026/07/07 2:34 p.m.•31 views

Generation of Error Message Containing Sensitive Information in janeczku/calibre-web

A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of the shelf is exposed in an error message when a user attempts to remove a book from a shelf they d...

4.3CVSS6AI score0.00371EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-3282

Malicious code in bioql PyPI...

4.3CVSS4.7AI score0.00371EPSS
SaveExploits1References4
CVE
CVE
•added 2024/11/15 10:52 a.m.•73 views

CVE-2021-3986

The CVE-2021-3986 issue in janeczku/calibre-web is a data exposure vulnerability where an unauthorized user can view the names of private shelves. It occurs in shelf.py at line 221, exposing the shelf name in an error message when a non-owner tries to remove a book. This affects all versions prio...

4.3CVSS5.4AI score0.00371EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/15 10:52 a.m.•14 views

CVE-2021-3986 Information Disclosure in janeczku/calibre-web

A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of the shelf is exposed in an error message when a user attempts to remove a book from a shelf they d...

4.3CVSS6.4AI score0.00371EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2024/11/15 10:52 a.m.•6 views

CVE-2021-3986

A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of the shelf is exposed in an error message when a user attempts to remove a book from a shelf they d...

4.3CVSS5.4AI score0.00371EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/15 12:00 a.m.•2 views

CVE-2021-3986: Generation of Error Message Containing Sensitive Information

A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. This issue occurs in the file shelf.py at line 221, where the name of the shelf is exposed in an error message when a user attempts to remove a book from a shelf they d...

4.3CVSS5.4AI score0.00371EPSS
SaveExploits1References1
Rows per page
Query Builder