Zoneminder

Zoneminder

92 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2024-43360

Exploit
  • EPSS 6.22%
  • Veröffentlicht 12.08.2024 21:15:33
  • Zuletzt bearbeitet 04.09.2024 21:42:20

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61.

6.1

CVE-2024-43358

  • EPSS 0.35%
  • Veröffentlicht 12.08.2024 21:15:33
  • Zuletzt bearbeitet 04.09.2024 21:41:06

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the filter view via the filter[Id]. This vulnerability is fixed in 1.36.34 and 1.37.61.

6.1

CVE-2024-43359

  • EPSS 0.4%
  • Veröffentlicht 12.08.2024 21:15:33
  • Zuletzt bearbeitet 04.09.2024 21:43:09

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 an...

6.5

CVE-2023-41884

Exploit
  • EPSS 0.5%
  • Veröffentlicht 12.08.2024 20:15:07
  • Zuletzt bearbeitet 13.09.2024 15:08:19

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36...

8.2

CVE-2020-25730

  • EPSS 0.63%
  • Veröffentlicht 04.04.2024 08:15:06
  • Zuletzt bearbeitet 27.05.2025 13:59:27

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php.

8.8

CVE-2023-26039

  • EPSS 1.25%
  • Veröffentlicht 25.02.2023 02:15:13
  • Zuletzt bearbeitet 21.11.2024 07:50:38

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl() in (/web/api/app/Controlle...

6.5

CVE-2023-26038

Exploit
  • EPSS 0.51%
  • Veröffentlicht 25.02.2023 02:15:13
  • Zuletzt bearbeitet 21.11.2024 07:50:38

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via web/a...

9.8

CVE-2023-26037

  • EPSS 0.61%
  • Veröffentlicht 25.02.2023 02:15:13
  • Zuletzt bearbeitet 21.11.2024 07:50:38

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an SQL Injection. The minTime and maxTime request parameters are not p...

9.8

CVE-2023-26036

Exploit
  • EPSS 0.9%
  • Veröffentlicht 25.02.2023 02:15:13
  • Zuletzt bearbeitet 21.11.2024 07:50:38

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via /web/...

9.8

CVE-2023-26035

  • EPSS 80.46%
  • Veröffentlicht 25.02.2023 02:15:13
  • Zuletzt bearbeitet 21.11.2024 07:50:37

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorizat...