Skip to content

Zoneminder vulnerabilities

Products

Zoneminder96

Newest

zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view ...CVE-2019-7345Fix available4.8 MediumFebruary 4, 2019
zoneminderReflected XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or...CVE-2019-7344Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker...CVE-2019-7343Fix available6.1 MediumFebruary 4, 2019
zoneminderPOST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7342Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker...CVE-2019-7341Fix available6.1 MediumFebruary 4, 2019
zoneminderPOST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7340Fix available6.1 MediumFebruary 4, 2019
zoneminderPOST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7339Fix available6.1 MediumFebruary 4, 2019
zoneminderSelf - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or...CVE-2019-7338Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' ...CVE-2019-7337Fix available4.8 MediumFebruary 4, 2019
zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view...CVE-2019-7336Fix available6.1 MediumFebruary 4, 2019
zoneminderSelf - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or...CVE-2019-7335Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7334Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7333Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7332Fix available6.1 MediumFebruary 4, 2019
zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an...CVE-2019-7331Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7330Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on...CVE-2019-7329Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7328Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to...CVE-2019-7327Fix available6.1 MediumFebruary 4, 2019
zoneminderSelf - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an...CVE-2019-7326Fix available6.1 MediumFebruary 4, 2019
zoneminderReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under...CVE-2019-7325Fix available6.1 MediumFebruary 4, 2019
zoneminderA stored-self XSS exists in web/skins/classic/views/controlcaps.php of ZoneMinder through 1.32.3,...CVE-2019-6992Fix available6.1 MediumJanuary 28, 2019
zoneminderA classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the...CVE-2019-6991Fix available9.8 CriticalJanuary 28, 2019
zoneminderA stored-self XSS exists in web/skins/classic/views/zones.php of ZoneMinder through 1.32.3,...CVE-2019-6990Fix available5.4 MediumJanuary 28, 2019
zoneminderAn issue was discovered in ZoneMinder v1.32.3. Reflected XSS exists in web/skins/classic/views...CVE-2019-6777Fix available6.1 MediumJanuary 24, 2019
zoneminderZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter...CVE-2018-1000833Fix available9.8 CriticalDecember 20, 2018
zoneminderZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter...CVE-2018-1000832Fix available9.8 CriticalDecember 20, 2018
zoneminderA Cross-Site Scripting (XSS) was discovered in ZoneMinder before 1.30.2. The vulnerability exists...CVE-2017-7203Fix available6.1 MediumMarch 21, 2017
zoneminderCross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and earlier allows remote...CVE-2016-10206Fix available8.8 HighMarch 3, 2017
zoneminderSession fixation vulnerability in Zoneminder 1.30 and earlier allows remote attackers to hijack...CVE-2016-10205Fix available7.3 HighMarch 3, 2017
zoneminderSQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute...CVE-2016-10204Public exploitFix available9.8 CriticalMarch 3, 2017
zoneminderCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers...CVE-2016-10203Fix available6.1 MediumMarch 3, 2017
zoneminderCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers...CVE-2016-10202Fix available6.1 MediumMarch 3, 2017
zoneminderCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers...CVE-2016-10201Fix available6.1 MediumMarch 3, 2017
zoneminderA file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x...CVE-2017-5595Fix available5.5 MediumFebruary 6, 2017
zoneminderZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF ...CVE-2017-5368Fix available8.8 HighFebruary 6, 2017
zoneminderMultiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder...CVE-2017-5367Fix available6.1 MediumFebruary 6, 2017
zoneminderInformation disclosure and authentication bypass vulnerability exists in the Apache HTTP Server...CVE-2016-10140Public exploitFix available7.5 HighJanuary 13, 2017
zoneminderMultiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote...CVE-2013-0332Public exploitFix availableEPSS 10.2%5.0 MediumMarch 14, 2013
zoneminderincludes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote...CVE-2013-0232Public exploitFix availableEPSS 47.9%7.5 HighMarch 14, 2013
zoneminderZoneMinder 1.23.3 on Gentoo Linux uses 0644 permissions for /etc/zm.conf, which allows local...CVE-2008-6756Fix available2.1 LowApril 27, 2009
zoneminderZoneMinder 1.23.3 on Fedora 10 sets the ownership of /etc/zm.conf to the apache user account, and...CVE-2008-6755Fix available5.0 MediumApril 27, 2009
zoneminderUnspecified "Command Injection" vulnerability in ZoneMinder 1.23.3 and earlier allows remote...CVE-2008-3882Fix available10.0 HighSeptember 2, 2008
zoneminderMultiple cross-site scripting (XSS) vulnerabilities in ZoneMinder 1.23.3 and earlier allow remote...CVE-2008-3881Fix available4.3 MediumSeptember 2, 2008
zoneminderSQL injection vulnerability in zm_html_view_event.php in ZoneMinder 1.23.3 and earlier allows...CVE-2008-3880Fix available7.5 HighSeptember 2, 2008
zoneminderZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated...CVE-2008-1381Fix available7.5 HighMay 1, 2008