Rezultati pretraživanja za 'Proizvođač: zoneminder'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2019-8425 | 4.3 | includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages. | 2019-02-19 16:33:00 | 2019-02-18 00:29:00 |
| CVE-2019-8424 | 7.5 | ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter. | 2019-02-19 16:33:00 | 2019-02-18 00:29:00 |
| CVE-2019-8423 | 7.5 | ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter. | 2019-02-19 16:33:00 | 2019-02-18 00:29:00 |
| CVE-2019-8429 | 7.5 | ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter. | 2019-02-19 16:31:00 | 2019-02-18 00:29:00 |
| CVE-2019-8428 | 7.5 | ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value. | 2019-02-19 16:31:00 | 2019-02-18 00:29:00 |
| CVE-2018-1000833 | 7.5 | ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution. | 2019-02-06 22:27:00 | 2018-12-20 15:29:00 |
| CVE-2019-7350 | 4.9 | Session fixation exists in ZoneMinder through 1.32.3, as an attacker can fixate his own session cookies to the next logged-in user, thereby hijacking the victim's account. This occurs because a set of multiple cookies (between 3 and 5) is being gener | 2019-02-05 21:50:00 | 2019-02-04 19:29:00 |
| CVE-2019-7349 | 4.3 | Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'newMonitor[V4LCapturesPerFrame]' parameter value in the view monitor (monitor.php) because proper filt | 2019-02-05 21:32:00 | 2019-02-04 19:29:00 |
| CVE-2019-7348 | 4.3 | Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'username' parameter value in the view user (user.php) because proper filtration is omitted. | 2019-02-05 21:28:00 | 2019-02-04 19:29:00 |
| CVE-2019-7346 | 6.8 | A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback function is called displaying a "Try again" button, which allows resending the failed request, making the CSRF attack successful. | 2019-02-05 21:28:00 | 2019-02-04 19:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/9
Zapisa po stranici: