CVE-2022-0767

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.

CVE-2022-0766

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.

CVE-2022-30765

Calibre-Web before 0.6.18 allows user table SQL Injection.

CVE-2022-0339

Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.

CVE-2021-4170

calibre-web is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2022-0406

Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16.

CVE-2022-0939

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.

CVE-2022-0405

Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16.

CVE-2022-0352

Cross-site Scripting (XSS) - Reflected in Pypi calibreweb prior to 0.6.16.

CVE-2021-4171

calibre-web is vulnerable to Business Logic Errors

CVE-2022-0990

Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.

CVE-2022-0273

Improper Access Control in Pypi calibreweb prior to 0.6.16.

CVE-2021-4164

calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)