Search CVE reports
71 – 80 of 85 results
CVE-2016-10204
Medium prioritySQL injection vulnerability in Zoneminder 1.30 and earlier allows remote attackers to execute arbitrary SQL commands via the limit parameter in a log query request to index.php.
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Not affected | Not in release | Vulnerable |
CVE-2016-10203
Medium priorityCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the name when creating a new monitor.
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Not affected | Not in release | Vulnerable |
CVE-2016-10202
Medium priorityCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to index.php.
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Not affected | Not in release | Vulnerable |
CVE-2016-10201
Medium priorityCross-site scripting (XSS) vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in a download log request to index.php.
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Not affected | Not in release | Vulnerable |
CVE-2017-5595
Medium priorityA file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Not affected | Not in release | Vulnerable |
CVE-2017-5368
Medium priorityZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a remote attack to make changes to the web application as the current logged in victim. If the...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Not affected | Not in release | Vulnerable |
CVE-2017-5367
Medium priorityMultiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Not affected | Not in release | Vulnerable |
CVE-2016-10140
Low priorityInformation disclosure and authentication bypass vulnerability exists in the Apache HTTP Server configuration bundled with ZoneMinder v1.30 and v1.29, which allows a remote unauthenticated attacker to browse all directories in the...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Not affected | Not in release | Vulnerable |
CVE-2013-0332
Medium priorityMultiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) view, (2) request, or (3) action parameter.
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | — | — | — | — | — |
CVE-2013-0232
Medium priorityincludes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | — | — | — | Not in release | Not affected |