Filtered by vendor Zoneminder
Subscriptions
Total
96 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2019-7329 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any proper filtration, leading to XSS. | ||||
| CVE-2019-7328 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) via /js/frame.js.php because proper filtration is omitted. | ||||
| CVE-2019-7327 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) because proper filtration is omitted. | ||||
| CVE-2019-7326 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console (console.php) because proper filtration is omitted. This relates to the index.php?view=monitor Host Name field. | ||||
| CVE-2019-7325 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without applying any proper filtration. | ||||
| CVE-2019-6992 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| A stored-self XSS exists in web/skins/classic/views/controlcaps.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a long NAME or PROTOCOL to the index.php?view=controlcaps URI. | ||||
| CVE-2019-6991 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a long username. | ||||
| CVE-2019-6990 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| A stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in a vulnerable field via a crafted Zone NAME to the index.php?view=zones&action=zoneImage&mid=1 URI. | ||||
| CVE-2019-6777 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| An issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views/plugin.php via the zm/index.php?view=plugin pl parameter. | ||||
| CVE-2019-13072 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | 5.4 Medium |
| Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page. | ||||
| CVE-2018-1000833 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution. | ||||
| CVE-2018-1000832 | 1 Zoneminder | 1 Zoneminder | 2024-11-21 | N/A |
| ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution. | ||||
| CVE-2023-41884 | 1 Zoneminder | 1 Zoneminder | 2024-09-13 | 7.1 High |
| ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34. | ||||
| CVE-2024-43359 | 1 Zoneminder | 1 Zoneminder | 2024-09-04 | 0 Low |
| ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagereview via the displayinterval, speed, and scale parameters. This vulnerability is fixed in 1.36.34 and 1.37.61. | ||||
| CVE-2024-43360 | 1 Zoneminder | 1 Zoneminder | 2024-09-04 | 9.8 Critical |
| ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. This vulnerability is fixed in 1.36.34 and 1.37.61. | ||||
| CVE-2024-43358 | 1 Zoneminder | 1 Zoneminder | 2024-09-04 | 6.1 Medium |
| ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the filter view via the filter[Id]. This vulnerability is fixed in 1.36.34 and 1.37.61. | ||||