Rezultati pretraživanja za 'Proizvođač: zoneminder'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2016-10201 | 4.3 | Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php. | 2017-03-07 12:58:00 | 2017-03-03 15:59:00 |
| CVE-2017-5595 | 2.1 | A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/pa | 2017-02-16 14:09:00 | 2017-02-06 17:59:00 |
| CVE-2017-5368 | 6.8 | ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a remote attack to make changes to the web application as the current logged in victim. If the victim visits a mal | 2017-02-10 02:59:00 | 2017-02-06 17:59:00 |
| CVE-2017-5367 | 4.3 | Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's | 2017-02-10 02:59:00 | 2017-02-06 17:59:00 |
| CVE-2013-0232 | 7.5 | includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command param | 2013-08-29 06:46:00 | 2013-03-20 15:55:00 |
| CVE-2013-0332 | 5.0 | Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) view, (2) request, or (3) action parameter. | 2013-03-21 16:31:00 | 2013-03-20 15:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/9
Zapisa po stranici: