zoneminder vulnerabilities (Debian)
97 vulnerabilities.
-
zoneminderDebian ZoneMinder: Authenticated RCE via command injection in monitor Device Path 8.8 High -
zoneminderDebian ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature 8.8 High -
zoneminderDebian ZoneMinder failed token handling bypasses web authentication 5.3 Medium -
zoneminderDebian ZoneMinder before 1.38.4 Incorrect Authorization in frames API index 5.3 Medium -
zoneminderDebian ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response 8.3 High -
zoneminderDebian ZoneMinder 1.37.x Path Traversal via files view 7.1 High -
zoneminderDebian Cross-monitor event media authorization bypass in direct event media endpoints 6.5 Medium -
zoneminderDebian ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php) 9.0 Critical -
zoneminderDebian OS Command Injection in PayRange API 8.7 High -
zoneminderDebian ZoneMinder ZoneMinder - Remote Code Execution 8.8 High -
zoneminderDebian ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fields 8.8 High -
zoneminderDebian ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application... 9.8 Critical -
zoneminderDebian RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing ex… 6.6 Medium -
zoneminderDebian ZoneMinder Time-based SQL Injection 9.8 Critical -
zoneminderDebian XSS vulnerabilities in montagereview 0.0 None -
zoneminderDebian XSS vulnerability in filter view 6.1 Medium -
zoneminderDebian ZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.php 7.1 High -
zoneminderDebian Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote... 8.2 High -
zoneminderDebian ZoneMinder vulnerable to OS Command injection in daemonControl() API 7.1 High -
zoneminderDebian ZoneMinder contains Local File Inclusion vulnerability via `web/ajax/modal.php` 5.4 Medium -
zoneminderDebian ZoneMinder contains SQL Injection via report_event_audit 8.9 High -
zoneminderDebian ZoneMinder contains Local File Inclusion vulnerability 8.1 High -
zoneminderDebian ZoneMinder vulnerable to Missing Authorization 7.2 High -
zoneminderDebian ZoneMinder SQL Injection 9.6 Critical -
zoneminderDebian ZoneMinder contains SQL injection via malicious Jason Web Token 8.9 High -
zoneminderDebian ZoneMinder contains Cross-site Scripting via log viewing 7.7 High -
zoneminderDebian Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie... 4.6 Medium -
zoneminderDebian A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute... 5.4 Medium -
zoneminderDebian Denial of service through logs in zoneminder 5.4 Medium -
zoneminderDebian CSRF key bypass using HTTP methods in zoneminder 8.0 High -
zoneminderDebian Database log access in ZoneMinder 9.1 Critical -
zoneminderDebian Stored Cross-Site Scripting Vulnerability In File Parameter in zoneminder 7.6 High -
zoneminderDebian Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in wenzhixin/bootstrap-table 6.8 Medium -
zoneminderDebian ZoneMinder before 1.36.13 allows remote code execution via an invalid language. 9.8 Critical -
zoneminderDebian ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php. 6.1 Medium -
zoneminderDebian Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed... 5.4 Medium -
zoneminderDebian ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj]... 9.8 Critical -
zoneminderDebian ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql... 9.8 Critical -
zoneminderDebian daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via... 9.8 Critical -
zoneminderDebian skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array,... 6.1 Medium -
zoneminderDebian includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages. 6.1 Medium -
zoneminderDebian ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter. 9.8 Critical -
zoneminderDebian ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query]... 9.8 Critical -
zoneminderDebian Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state'... 6.1 Medium -
zoneminderDebian Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit... 6.5 Medium -
zoneminderDebian Session fixation exists in ZoneMinder through 1.32.3, as an attacker can fixate his own session... 7.3 High -
zoneminderDebian Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to... 6.1 Medium -
zoneminderDebian Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an... 6.1 Medium -
zoneminderDebian A Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1.32.3 as a... 7.5 High -
zoneminderDebian A CSRF check issue exists in ZoneMinder through 1.32.3 as whenever a CSRF check fails, a callback... 8.8 High - Show olderLoading…