janeczku calibre-web

Name: janeczku calibre-web
Brand: janeczku

productUS

cpe:2.3:a:janeczku:calibre-web:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

11critical2high9medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-39123US	—	23.1% (98th)	Exploit	no fix	2024-07-19	0.6.0 → 0.6.21
CVE-2025-7404US	critical9.8	2.76% (86th)	Exploit	no fix	2025-07-24	= 0.6.24
CVE-2025-65858US	—	0.21% (11th)	Exploit	no fix	2025-12-02	= 0.6.25
CVE-2021-4171US	critical9.8	1.39% (72nd)	—	0.6.15	2022-01-17	< 0.6.15
CVE-2020-12627US	critical9.8OT elevated	1.37% (72nd)	—	no fix	2020-05-04	= 0.6.6
CVE-2022-0990US	critical9.1	1.34% (71st)	—	0.6.18	2022-04-04	< 0.6.18
CVE-2022-0766US	critical9.8	1.31% (71st)	—	0.6.17	2022-03-07	< 0.6.17
CVE-2022-30765US	critical9.8	1.21% (68th)	—	no fix	2022-05-16	= 0.6.18
CVE-2022-0939US	critical9.9	1.06% (64th)	—	0.6.18	2022-04-04	< 0.6.18
CVE-2022-0767US	critical9.9	0.98% (62nd)	—	0.6.17	2022-03-07	< 0.6.17
CVE-2022-0339US	critical9.8	0.96% (61st)	—	0.6.16	2022-01-30	< 0.6.16
CVE-2022-0352US	medium6.1	0.85% (58th)	—	0.6.16	2022-01-28	< 0.6.16
CVE-2021-4170US	medium5.4	0.81% (57th)	—	0.6.15	2022-01-16	< 0.6.15
CVE-2022-2525US	critical9.8	0.77% (55th)	—	0.6.20	2023-04-15	< 0.6.20
CVE-2022-0405US	medium4.3	0.76% (55th)	—	0.6.16	2022-04-03	< 0.6.16
CVE-2023-2106US	critical9.8	0.75% (55th)	—	0.6.20	2023-04-15	< 0.6.20
CVE-2022-0273US	medium6.5OT elevated	0.67% (52nd)	—	0.6.16	2022-01-30	< 0.6.16
CVE-2022-0406US	medium4.3OT elevated	0.66% (52nd)	—	0.6.16	2022-04-03	< 0.6.16
CVE-2021-25964US	medium5.4	0.55% (46th)	—	0.6.12	2021-10-04	0.6.0 → 0.6.12
CVE-2021-4164US	high8.8	0.55% (46th)	—	0.6.15	2022-01-17	< 0.6.15
CVE-2021-25965US	high8.8	0.53% (44th)	—	no fix	2021-11-16	0.6.0 → 0.6.13
CVE-2021-3988US	medium6.1	0.38% (32nd)	—	0.6.15	2024-11-15	< 0.6.15
CVE-2021-3986US	medium4.3	0.37% (31st)	—	0.6.15	2024-11-15	< 0.6.15
CVE-2021-3987US	medium4.3OT elevated	0.35% (28th)	—	0.6.15	2024-11-15	< 0.6.15

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-918Server-Side Request Forgery (SSRF)5 CVEs
CWE-284Improper Access Control3 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan