Search for packages
| purl | pkg:deb/debian/calibre@9.5.0%2Bds%2B~0.10.5-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1uhd-3upf-nqbu | Race condition issues were found in Calibre at devices/linux_mount_helper.c allowing unprivileged users the ability to mount any device to anywhere. |
CVE-2011-4126
|
| VCID-4gvv-bsf9-vqca | Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. |
CVE-2023-46303
|
| VCID-4kgm-mmjn-g3a7 | The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript. |
CVE-2016-10187
|
| VCID-62s7-w8zq-zfg5 | Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. |
CVE-2024-6782
|
| VCID-favj-1bjh-9uff | calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) in html_preprocess_rules in ebooks/conversion/preprocess.py. |
CVE-2021-44686
|
| VCID-mqmp-g7uy-gbg4 | calibre: Calibre: Arbitrary file write via crafted RocketBook (.rb) file |
CVE-2026-30853
|
| VCID-pa4n-csyj-wqet | Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. |
CVE-2024-7009
|
| VCID-qsbr-up7k-kbcr | Input validation issues were found in Calibre at devices/linux_mount_helper.c which can lead to argument injection and elevation of privileges. |
CVE-2011-4124
|
| VCID-rrh8-rvrz-mkdz | Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. |
CVE-2024-6781
|
| VCID-stnm-9pm7-gqbv | A untrusted search path issue was found in Calibre at devices/linux_mount_helper.c leading to the ability of unprivileged users to execute any program as root. |
CVE-2011-4125
|
| VCID-xhf1-k7jg-6ued | gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call. |
CVE-2018-7889
|
| VCID-ycp8-ws8x-3qbn | Multiple vulnerabilities have been discovered in calibre, the worst of which could lead to remote code execution. |
CVE-2024-7008
|
| VCID-z6j2-32tf-g7ax | Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation. |
CVE-2010-1028
|