Search CVE reports
11 – 20 of 85 results
CVE-2023-26036
Medium priorityZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path)...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2023-26035
Medium priorityZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2023-26034
Medium priorityZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are affected by a SQL Injection vulnerability. The (blind)...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2023-26032
Medium priorityZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain SQL Injection via malicious jason web token. The...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2023-25825
Medium priorityZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 are vulnerable to Cross-site Scripting. Log entries can be injected...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2022-30769
Medium prioritySession fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user.
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2022-30768
Medium priorityA Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform)...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2022-39291
Medium priorityZoneMinder is a free, open source Closed-circuit television software application. Affected versions of zoneminder are subject to a vulnerability which allows users with "View" system permissions to inject new data into the logs...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2022-39290
Medium priorityZoneMinder is a free, open source Closed-circuit television software application. In affected versions authenticated users can bypass CSRF keys by modifying the request supplied to the Zoneminder web application....
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |
CVE-2022-39289
Medium priorityZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Not in release | Needs evaluation |