calibre vulnerabilities (Mageia)

21 vulnerabilities.

• calibre Mageia Calibre SQL Injection CVE-2024-7009 Fix available EPSS 13.9% 4.2 MediumAugust 6, 2024
• calibre Mageia Calibre Reflected Cross-Site Scripting (XSS) CVE-2024-7008 Fix available EPSS 25.6% 5.4 MediumAugust 6, 2024
• calibre Mageia Calibre Remote Code Execution CVE-2024-6782 Public exploitFix available EPSS 84.1% 9.8 CriticalAugust 6, 2024
• calibre Mageia Calibre Arbitrary File Read CVE-2024-6781 Fix available EPSS 62.4% 7.5 HighAugust 6, 2024
• calibre Mageia link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by... CVE-2023-46303 Fix available 7.5 HighOctober 22, 2023
• calibre Mageia calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular... CVE-2021-44686 Fix available 7.5 HighDecember 6, 2021
• calibre Mageia gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data,... CVE-2018-7889 Fix available 7.8 HighMarch 8, 2018
• calibre Mageia On Linux systems, if the content process is compromised, the sandbox broker will allow files to... CVE-2017-7794 Fix available 7.8 HighAugust 10, 2017
• calibre Mageia The PoDoFo::PdfXRefStreamParserObject::ReadXRefStreamEntry function in base... CVE-2017-8787 Fix available 8.8 HighMay 5, 2017
• calibre Mageia The doc/PdfPage.cpp:614:20 code in PoDoFo 0.9.5 allows remote attackers to cause a denial of... CVE-2017-7380 Fix available 5.5 MediumApril 3, 2017
• calibre Mageia The PoDoFo::PdfSimpleEncoding::ConvertToEncoding function in PdfEncoding.cpp in PoDoFo 0.9.5... CVE-2017-7379 Fix available 5.5 MediumApril 3, 2017
• calibre Mageia The PoDoFo::PdfPainter::ExpandTabs function in PdfPainter.cpp in PoDoFo 0.9.5 allows remote... CVE-2017-7378 Fix available 5.5 MediumApril 3, 2017
• calibre Mageia The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.4 allows remote... CVE-2017-6847 Fix available 5.5 MediumMarch 15, 2017
• calibre Mageia Buffer overflow in the PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo... CVE-2017-6844 Fix available 7.8 HighMarch 15, 2017
• calibre Mageia The ColorChanger::GetColorFromStack function in colorchanger.cpp in PoDoFo 0.9.5 allows remote... CVE-2017-6840 Fix available 5.5 MediumMarch 15, 2017
• calibre Mageia Heap-based buffer overflow in the PoDoFo::PdfTokenizer::GetNextToken function in PdfTokenizer.cpp... CVE-2017-5886 Fix available 7.8 HighMarch 1, 2017
• calibre Mageia The PoDoFo::PdfParser::ReadXRefSubsection function in PdfParser.cpp in PoDoFo 0.9.4 allows remote... CVE-2017-5855 Fix available 5.5 MediumMarch 1, 2017
• calibre Mageia base/PdfOutputStream.cpp in PoDoFo 0.9.4 allows remote attackers to cause a denial of service ... CVE-2017-5854 Fix available 5.5 MediumMarch 1, 2017
• calibre Mageia Integer overflow in base/PdfParser.cpp in PoDoFo 0.9.4 allows remote attackers to have... CVE-2017-5853 Fix available 7.8 HighMarch 1, 2017
• calibre Mageia The PoDoFo::PdfPage::GetInheritedKeyFromObject function in base/PdfVariant.cpp in PoDoFo 0.9.4... CVE-2017-5852 Fix available 5.5 MediumMarch 1, 2017
• calibre Mageia The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a... CVE-2016-10187 Fix available 5.5 MediumFebruary 11, 2017