Search for packages
| purl | pkg:deb/debian/calibre@0.8.51%2Bdfsg1-0.1 |
| Next non-vulnerable version | 8.16.2+ds+~0.10.5-3~bpo13+1 |
| Latest non-vulnerable version | 8.16.2+ds+~0.10.5-3~bpo13+1 |
| Risk | 4.5 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-1uhd-3upf-nqbu
Aliases: CVE-2011-4126 |
Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere. |
Affected by 7 other vulnerabilities. |
|
VCID-4gvv-bsf9-vqca
Aliases: CVE-2023-46303 |
Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. |
Affected by 10 other vulnerabilities. |
|
VCID-4kgm-mmjn-g3a7
Aliases: CVE-2016-10187 |
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript. |
Affected by 5 other vulnerabilities. |
|
VCID-favj-1bjh-9uff
Aliases: CVE-2021-44686 |
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py. |
Affected by 10 other vulnerabilities. |
|
VCID-pa4n-csyj-wqet
Aliases: CVE-2024-7009 |
Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. |
Affected by 13 other vulnerabilities. |
|
VCID-qsbr-up7k-kbcr
Aliases: CVE-2011-4124 |
Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges. |
Affected by 7 other vulnerabilities. |
|
VCID-stnm-9pm7-gqbv
Aliases: CVE-2011-4125 |
A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root. |
Affected by 7 other vulnerabilities. |
|
VCID-xhf1-k7jg-6ued
Aliases: CVE-2018-7889 |
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call. |
Affected by 4 other vulnerabilities. |
|
VCID-ycp8-ws8x-3qbn
Aliases: CVE-2024-7008 |
Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. |
Affected by 13 other vulnerabilities. |
|
VCID-z6j2-32tf-g7ax
Aliases: CVE-2010-1028 |
Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. |
Affected by 6 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||