zoneminder vulnerabilities (Ubuntu)
89 vulnerabilities.
-
zoneminderUbuntu ZoneMinder: Authenticated RCE via command injection in monitor Device Path 8.8 High -
zoneminderUbuntu ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature 8.8 High -
zoneminderUbuntu ZoneMinder failed token handling bypasses web authentication 5.3 Medium -
zoneminderUbuntu ZoneMinder before 1.38.4 Incorrect Authorization in frames API index 5.3 Medium -
zoneminderUbuntu ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response 8.3 High -
zoneminderUbuntu ZoneMinder 1.37.x Path Traversal via files view 7.1 High -
zoneminderUbuntu Cross-monitor event media authorization bypass in direct event media endpoints 6.5 Medium -
zoneminderUbuntu ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php) 9.0 Critical -
zoneminderUbuntu OS Command Injection in PayRange API 8.7 High -
zoneminderUbuntu ZoneMinder ZoneMinder - Remote Code Execution 8.8 High -
zoneminderUbuntu ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fields 8.8 High -
zoneminderUbuntu ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application... 9.8 Critical -
zoneminderUbuntu Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64 10.0 Critical -
zoneminderUbuntu RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate privileges allowing ex… 6.6 Medium -
zoneminderUbuntu ZoneMinder Time-based SQL Injection 9.8 Critical -
zoneminderUbuntu XSS vulnerabilities in montagereview 0.0 None -
zoneminderUbuntu XSS vulnerability in filter view 6.1 Medium -
zoneminderUbuntu ZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.php 7.1 High -
zoneminderUbuntu Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote... 8.2 High -
zoneminderUbuntu ZoneMinder vulnerable to OS Command injection in daemonControl() API 7.1 High -
zoneminderUbuntu ZoneMinder contains Local File Inclusion vulnerability via `web/ajax/modal.php` 5.4 Medium -
zoneminderUbuntu ZoneMinder contains SQL Injection via report_event_audit 8.9 High -
zoneminderUbuntu ZoneMinder contains Local File Inclusion vulnerability 8.1 High -
zoneminderUbuntu ZoneMinder vulnerable to Missing Authorization 7.2 High -
zoneminderUbuntu ZoneMinder SQL Injection 9.6 Critical -
zoneminderUbuntu ZoneMinder contains SQL injection via malicious Jason Web Token 8.9 High -
zoneminderUbuntu ZoneMinder contains Cross-site Scripting via log viewing 7.7 High -
zoneminderUbuntu Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie... 4.6 Medium -
zoneminderUbuntu A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute... 5.4 Medium -
zoneminderUbuntu Denial of service through logs in zoneminder 5.4 Medium -
zoneminderUbuntu CSRF key bypass using HTTP methods in zoneminder 8.0 High -
zoneminderUbuntu Database log access in ZoneMinder 9.1 Critical -
zoneminderUbuntu Stored Cross-Site Scripting Vulnerability In File Parameter in zoneminder 7.6 High -
zoneminderUbuntu Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in wenzhixin/bootstrap-table 6.8 Medium -
zoneminderUbuntu ZoneMinder before 1.36.13 allows remote code execution via an invalid language. 9.8 Critical -
zoneminderUbuntu Cross-site Scripting (XSS) 3.1 Low -
zoneminderUbuntu Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed... 5.4 Medium -
zoneminderUbuntu ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj]... 9.8 Critical -
zoneminderUbuntu ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql... 9.8 Critical -
zoneminderUbuntu daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via... 9.8 Critical -
zoneminderUbuntu skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array,... 6.1 Medium -
zoneminderUbuntu includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages. 6.1 Medium -
zoneminderUbuntu ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter. 9.8 Critical -
zoneminderUbuntu ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query]... 9.8 Critical -
zoneminderUbuntu Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'state'... 6.1 Medium -
zoneminderUbuntu Log Injection exists in ZoneMinder through 1.32.3, as an attacker can entice the victim to visit... 6.5 Medium -
zoneminderUbuntu Session fixation exists in ZoneMinder through 1.32.3, as an attacker can fixate his own session... 7.3 High -
zoneminderUbuntu Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to... 6.1 Medium -
zoneminderUbuntu Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an... 6.1 Medium -
zoneminderUbuntu A Time-of-check Time-of-use (TOCTOU) Race Condition exists in ZoneMinder through 1.32.3 as a... 7.5 High - Show olderLoading…