Rezultati pretraživanja za 'Proizvođač: zoneminder'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2008-6756 | 2.1 | ZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local users to obtain the database username and password by reading this file. | 2017-08-17 01:29:00 | 2009-04-27 22:30:00 |
| CVE-2008-6755 | 5.0 | ZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and sets the permissions to 0600, which makes it easier for remote attackers to modify this file by accessing it through a (1) PHP or (2) CGI script. | 2017-08-17 01:29:00 | 2009-04-27 22:30:00 |
| CVE-2008-1381 | 7.5 | ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL. | 2017-08-08 01:30:00 | 2008-05-01 19:05:00 |
| CVE-2004-0227 | 7.5 | Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string. | 2017-07-11 01:29:00 | 2004-06-14 04:00:00 |
| CVE-2016-10206 | 6.8 | Cross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted us | 2017-03-29 01:59:00 | 2017-03-03 15:59:00 |
| CVE-2016-10205 | 7.5 | Session fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack web sessions via the ZMSESSID cookie. | 2017-03-29 01:59:00 | 2017-03-03 15:59:00 |
| CVE-2016-10203 | 4.3 | Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor. | 2017-03-29 01:59:00 | 2017-03-03 15:59:00 |
| CVE-2016-10140 | 5.0 | Information disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker to browse all directories in the web root, e.g., a r | 2017-03-16 01:59:00 | 2017-01-13 09:59:00 |
| CVE-2016-10202 | 4.3 | Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to index.php. | 2017-03-07 13:11:00 | 2017-03-03 15:59:00 |
| CVE-2016-10204 | 7.5 | SQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php. | 2017-03-07 12:58:00 | 2017-03-03 15:59:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/9
Zapisa po stranici: