Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
zoneminder vulnerabilities and exploits
(subscribe to this query)
6.1
CVSSv3
CVE-2019-7343
Reflected - Cross Site Scripting (XSS) exists in ZoneMinder up to and including 1.32.3, allowing an malicious user to execute HTML or JavaScript code via a vulnerable 'newMonitor[Method]' parameter value in the view monitor (monitor.php) because proper filtration is omi...
Zoneminder Zoneminder
9.8
CVSSv3
CVE-2018-1000832
ZoneMinder version <= 1.32.2 contains a Other/Unknown vulnerability in User-controlled parameter that can result in Disclosure of confidential data, denial of service, SSRF, remote code execution.
Zoneminder Zoneminder
6.1
CVSSv3
CVE-2016-10203
Cross-site scripting (XSS) vulnerability in Zoneminder 1.30 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the name when creating a new monitor.
Zoneminder Zoneminder
9.8
CVSSv3
CVE-2016-10204
SQL injection vulnerability in Zoneminder 1.30 and previous versions allows remote malicious users to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.
Zoneminder Zoneminder
8.8
CVSSv3
CVE-2016-10206
Cross-site request forgery (CSRF) vulnerability in Zoneminder 1.30 and previous versions allows remote malicious users to hijack the authentication of users for requests that change passwords and possibly have unspecified other impact as demonstrated by a crafted user action requ...
Zoneminder Zoneminder
9.8
CVSSv3
CVE-2022-29806
ZoneMinder prior to 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability.
Zoneminder Zoneminder
6.1
CVSSv3
CVE-2023-25825
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions before 1.36.33 are vulnerable to Cross-site Scripting. Log entries can be injected into the database logs, containing a malicious referre...
Zoneminder Zoneminder
8.1
CVSSv3
CVE-2023-26032
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions before 1.36.33 and 1.37.33 contain SQL Injection via malicious jason web token. The Username field of the JWT token was trusted when perf...
Zoneminder Zoneminder
9.8
CVSSv3
CVE-2023-26035
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions before 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions ch...
Zoneminder Zoneminder
6 Github repositories
9.8
CVSSv3
CVE-2023-26036
ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions before 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via /web/index.php. By controlling $view,...
Zoneminder Zoneminder
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »