Vendor

Calibre

4 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.2

CVE-2024-7009 EPSS 14%

Calibre SQL Injection

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL injection on the SQLite database.

Calibre Calibre calibre calibre Debian Ubuntu

Aug 6, 2024
Medium 5.4

CVE-2024-7008 Scanner template EPSS 26%

Calibre Reflected Cross-Site Scripting (XSS)

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting.

Calibre Calibre calibre calibre Debian Ubuntu

Aug 6, 2024