Show filters
32 Total Results
Displaying 31-32 of 32
Sort by:
Attacker Value
Unknown
CVE-2018-7889
Disclosure Date: March 08, 2018 (last updated November 26, 2024)
gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.
0
Attacker Value
Unknown
CVE-2016-10187
Disclosure Date: March 16, 2017 (last updated November 26, 2024)
The E-book viewer in calibre before 2.75 allows remote attackers to read arbitrary files via a crafted epub file with JavaScript.
0
