Rezultati pretraživanja za 'Proizvođač: zoneminder'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2023-31493 | 6.6 | RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing execution of any commands on the remote system. | 2026-07-05 01:18:30 | 2024-10-15 15:15:12 |
| CVE-2026-27470 | 8.8 | ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a second-order SQL Injection vulnerability in the web/ajax/status.php file within the getNearEvents() | 2026-02-23 18:13:53 | 2026-02-21 08:16:12 |
| CVE-2025-65791 | 9.8 | ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() function. | 2026-02-19 15:53:43 | 2026-02-18 16:22:29 |
| CVE-2020-25730 | 8.2 | Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php. | 2025-05-27 13:59:27 | 2024-04-04 08:15:06 |
| CVE-2022-30769 | 4.6 | Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user. | 2025-04-30 17:15:49 | 2022-11-15 22:15:11 |
| CVE-2022-30768 | 5.4 | A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: | 2025-04-30 17:15:49 | 2022-11-15 22:15:11 |
| CVE-2023-41884 | 6.5 | ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36 | 2024-09-13 15:08:19 | 2024-08-12 20:15:07 |
| CVE-2024-43359 | 6.1 | ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 an | 2024-09-04 21:43:09 | 2024-08-12 21:15:33 |
| CVE-2024-43360 | 9.8 | ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61. | 2024-09-04 21:42:20 | 2024-08-12 21:15:33 |
| CVE-2024-43358 | 6.1 | ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the filter view via the filter[Id]. This vulnerability is fixed in 1.36.34 and 1.37.61. | 2024-09-04 21:41:06 | 2024-08-12 21:15:33 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/9
Zapisa po stranici: