Calibre CVE-2016-10187

Remote code execution in Calibre 9.2.1 and earlier allows authenticated users to write arbitrary files via a path traver

Calibre versions 9.2.1 and below allow authenticated users to write arbitrary files with any extension to any writable l

Remote code execution in Calibre prior to version 9.2.0 through a path traversal flaw in the CHM reader allows local att

Calibre 9.1.0 and earlier contains a path traversal vulnerability in EPUB conversion that allows malicious EPUB files to

calibre is an e-book manager. [CVSS 7.8 HIGH]

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attacke

Path traversal in Calibre <= 7.14.0 allow unauthenticated attackers to achieve arbitrary file read. Rated high severity

link_to_local_path in ebooks/conversion/plugins/html_input.py in calibre before 6.19.0 can, by default, add resources ou

calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS (Regular Expression Denial of Service) i

Unsanitized user-input in Calibre <= 7.15.0 allow users with permissions to perform full-text searches to achieve SQL in

HTTP response header injection in Calibre Content Server prior to version 9.4.0 permits authenticated users to inject ar

Unsanitized user-input in Calibre <= 7.15.0 allow attackers to perform reflected cross-site scripting. Rated medium seve