Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

85 records

Vendor: ZoneMinder Component: Zoneminder Clear all filters
TI-2024-29012 CVE-2024-43360

ZoneMinder Time-based SQL Injection

Priority HIGH 76

ZoneMinder is a free, open source closed-circuit television software application.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06171 Published 2024-08-12 Fixed in 1.36.34, 1.37.61 CWE-89
TI-2024-29011 CVE-2024-43359

XSS vulnerabilities in montagereview

Priority LOW 33

ZoneMinder is a free, open source closed-circuit television software application.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00398 Published 2024-08-12 Fixed in 1.36.34, 1.37.61 CWE-79
TI-2024-29010 CVE-2024-43358

XSS vulnerability in filter view

Priority LOW 27

ZoneMinder is a free, open source closed-circuit television software application.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2024-08-12 Fixed in 1.36.34, 1.37.61 CWE-79
TI-2023-11271 CVE-2023-26037

ZoneMinder contains SQL Injection via report_event_audit

Priority MEDIUM 44

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00607 Published 2023-02-25 Fixed in 1.36.33, 1.37.33 CWE-89
TI-2023-11270 CVE-2023-26036

ZoneMinder contains Local File Inclusion vulnerability

Priority HIGH 76

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2023-02-25 Fixed in 1.36.33, 1.37.33 CWE-426
TI-2023-11269 CVE-2023-26035

ZoneMinder vulnerable to Missing Authorization

Priority HIGH 82

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.80462 Published 2023-02-25 Fixed in 1.36.33, 1.37.33 CWE-862
TI-2023-11268 CVE-2023-26034

ZoneMinder SQL Injection

Priority HIGH 76

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01592 Published 2023-02-25 Fixed in 1.36.33, 1.37.33 CWE-89
TI-2023-11095 CVE-2023-25825

ZoneMinder contains Cross-site Scripting via log viewing

Priority HIGH 67

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0071 Published 2023-02-25 Fixed in 1.36.33 CWE-79
TI-2022-12899 CVE-2022-30768 · GHSA-mjxc-g8h2-2g9g

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to…

Priority MEDIUM 58

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the plat…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00631 Published 2022-11-15 No fix listed CWE-79
TI-2022-18667 CVE-2022-39291

Denial of service through logs in zoneminder

Priority MEDIUM 58

ZoneMinder is a free, open source Closed-circuit television software application.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.07106 Published 2022-10-07 Fixed in 1.36.27, 1.37.24 CWE-20
TI-2022-18666 CVE-2022-39290

CSRF key bypass using HTTP methods in zoneminder

Priority HIGH 70

ZoneMinder is a free, open source Closed-circuit television software application.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.07918 Published 2022-10-07 Fixed in 1.36.27, 1.37.24 CWE-287
TI-2022-18665 CVE-2022-39289

Database log access in ZoneMinder

Priority HIGH 80

ZoneMinder is a free, open source Closed-circuit television software application.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00955 Published 2022-10-07 Fixed in 1.36.27, 1.37.24 CWE-200
TI-2022-18661 CVE-2022-39285

Stored Cross-Site Scripting Vulnerability In File Parameter in zoneminder

Priority HIGH 66

ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "td" brackets.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.05123 Published 2022-10-07 Fixed in 1.36.27, 1.37.24 CWE-79
Load more