Vulnerabilities > Janeczku
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-15 | CVE-2021-3986 | Unspecified vulnerability in Janeczku Calibre-Web A vulnerability in janeczku/calibre-web allows unauthorized users to view the names of private shelves belonging to other users. | 4.3 |
| 2024-11-15 | CVE-2021-3987 | Missing Authorization vulnerability in Janeczku Calibre-Web An improper access control vulnerability exists in janeczku/calibre-web. | 4.3 |
| 2024-11-15 | CVE-2021-3988 | Unspecified vulnerability in Janeczku Calibre-Web A Cross-site Scripting (XSS) vulnerability exists in janeczku/calibre-web, specifically in the file `edit_books.js`. | 6.1 |
| 2023-04-15 | CVE-2023-2106 | Unspecified vulnerability in Janeczku Calibre-Web Weak Password Requirements in GitHub repository janeczku/calibre-web prior to 0.6.20. | 9.8 |
| 2023-04-15 | CVE-2022-2525 | Unspecified vulnerability in Janeczku Calibre-Web Improper Restriction of Excessive Authentication Attempts in GitHub repository janeczku/calibre-web prior to 0.6.20. | 9.8 |
| 2022-05-16 | CVE-2022-30765 | SQL Injection vulnerability in Janeczku Calibre-Web 0.6.18 Calibre-Web before 0.6.18 allows user table SQL Injection. | 9.8 |
| 2022-04-04 | CVE-2022-0990 | Unspecified vulnerability in Janeczku Calibre-Web Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18. | 9.1 |
| 2022-04-04 | CVE-2022-0939 | Unspecified vulnerability in Janeczku Calibre-Web Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18. | 9.9 |
| 2022-04-03 | CVE-2022-0405 | Unspecified vulnerability in Janeczku Calibre-Web Improper Access Control in GitHub repository janeczku/calibre-web prior to 0.6.16. | 4.3 |
| 2022-04-03 | CVE-2022-0406 | Incorrect Authorization vulnerability in Janeczku Calibre-Web Improper Authorization in GitHub repository janeczku/calibre-web prior to 0.6.16. | 4.3 |