Поиск уязвимостей

БДУ ФСТЭК

Microsoft MSRC

NVD

Oracle ELSA

Red Hat CVE

РЕД ОС

Rocky RLSA

SUSE CVRF

Ubuntu

Debian

Github

ALT Linux

Количество 5

CVE-2018-7889

больше 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8

EPSS: Низкий

CVE-2018-7889

больше 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8

EPSS: Низкий

CVE-2018-7889

больше 8 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on i ...

CVSS3: 7.8

EPSS: Низкий

GHSA-7hmv-6p8v-7rmw

больше 4 лет назад

gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.

CVSS3: 7.8

EPSS: Низкий

ALT-PU-2018-1454

больше 8 лет назад

ALT-PU-2018-1454: package `calibre` update to version 3.19.0-alt1

CVSS3: 7.8

EPSS: Низкий

Уязвимостей на страницу

Уязвимость	CVSS	EPSS	Опубликовано
CVE-2018-7889 gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.	CVSS3: 7.8	5% Низкий	больше 8 лет назад
CVE-2018-7889 gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.	CVSS3: 7.8	5% Низкий	больше 8 лет назад
CVE-2018-7889 gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on i ...	CVSS3: 7.8	5% Низкий	больше 8 лет назад
GHSA-7hmv-6p8v-7rmw gui2/viewer/bookmarkmanager.py in Calibre 3.18 calls cPickle.load on imported bookmark data, which allows remote attackers to execute arbitrary code via a crafted .pickle file, as demonstrated by Python code that contains an os.system call.	CVSS3: 7.8	5% Низкий	больше 4 лет назад
ALT-PU-2018-1454 ALT-PU-2018-1454: package `calibre` update to version 3.19.0-alt1	CVSS3: 7.8	5% Низкий	больше 8 лет назад

Уязвимостей на страницу