Rezultati pretraživanja za 'Proizvođač: zoneminder'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-26038 | 6.5 | ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via web/a | 2023-03-07 16:47:00 | 2023-02-25 02:15:00 |
| CVE-2023-26039 | 8.8 | ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl() in (/web/api/app/Controlle | 2023-03-07 16:43:00 | 2023-02-25 02:15:00 |
| CVE-2019-13072 | 3.5 | Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page. | 2023-01-30 18:57:00 | 2019-06-30 02:15:00 |
| CVE-2022-29806 | 7.5 | ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability. | 2022-05-06 13:07:00 | 2022-04-26 04:15:00 |
| CVE-2020-25729 | 4.3 | ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php. | 2020-09-24 14:42:00 | 2020-09-17 18:15:00 |
| CVE-2019-8427 | 7.5 | daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters. | 2020-08-24 17:37:00 | 2019-02-18 00:29:00 |
| CVE-2019-7347 | 6.0 | A Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1.32.3 as a session remains active for an authenticated user even after deletion from the users table. This allows a nonexistent user to access and modify records (add/d | 2020-08-24 17:37:00 | 2019-02-04 19:29:00 |
| CVE-2019-6991 | 7.5 | A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username. | 2020-08-24 17:37:00 | 2019-01-28 20:29:00 |
| CVE-2018-1000832 | 10.0 | ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution. | 2019-10-03 00:03:00 | 2018-12-20 15:29:00 |
| CVE-2019-8426 | 4.3 | skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter. | 2019-02-19 16:33:00 | 2019-02-18 00:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/9
Zapisa po stranici: