gelbphoenix

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

gelbphoenix records in CISA KEV

No gelbphoenix vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Autocaliweb 1 record MEDIUM

Records

2 records

TI-2025-34847 CVE-2025-55165

Autocaliweb Exposure of Sensitive Information to an Unauthorized Actor in `config_sql.py`

HIGH 71

Autocaliweb is a web app that offers an interface for browsing, reading, and downloading eBooks using a valid Calibre database.

CVSS 3.1HIGH 8.3 Local Low privileges User interaction EPSS 0.00307 Published 2025-08-12 Fixed in 0.8.3 CWE-200

TI-2025-06745 CVE-2025-7404 · GHSA-qc4j-v7h6-xr5h

Calibre Web 0.6.24 & Autocaliweb 0.7.0 - Blind C

MEDIUM 60

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Calibre Web, Autocaliweb allows Blind OS Command Injection.This issue affects Calibre Web: 0.6.24 (Nicolette); A…

CVSS 4.0MEDIUM 5.9 Network High privileges No interaction EPSS 0.02759 Published 2025-07-24 Fixed in 0.7.1 CWE-78

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0