Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

96 records

Vendor: ZoneMinder Clear all filters
TI-2026-65320 CVE-2026-102296 · GHSA-9748-j7v2-wg49

ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response

Priority HIGH 69

ZoneMinder before 1.38.4 contains static buffer overflow vulnerabilities in RemoteCameraHttp::GetResponse() that allow malicious HTTP cameras or intercepting attackers to overflow fixed-size buffers by sending oversized…

CVSS 4.0HIGH 8.3 Network No auth No interaction EPSS 0.00439 Published 2026-09-28 Fixed in 1.38.4 CWE-120
TI-2024-38465 CVE-2024-58386 · GHSA-rv7j-2hq3-r6fq

ZoneMinder 1.37.x Path Traversal via files view

Priority LOW 31

ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.0037 Published 2026-09-28 Fixed in 1.38.0 CWE-22
TI-2026-53246 CVE-2026-76060

OS Command Injection in PayRange API

Priority MEDIUM 44

An authenticated OS command injection vulnerability exists in ZoneMinder's event export functionality.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.02373 Published 2026-08-27 Fixed in 1.38.3 CWE-78
TI-2026-50815 CVE-2026-72556 · GHSA-9h33-vcjj-9j5m

ZoneMinder ZoneMinder - Remote Code Execution

Priority MEDIUM 42

A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01012 Published 2026-08-11 No fix listed CWE-78
TI-2024-29012 CVE-2024-43360

ZoneMinder Time-based SQL Injection

Priority HIGH 76

ZoneMinder is a free, open source closed-circuit television software application.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.06171 Published 2024-08-12 Fixed in 1.36.34, 1.37.61 CWE-89
TI-2024-29011 CVE-2024-43359

XSS vulnerabilities in montagereview

Priority LOW 33

ZoneMinder is a free, open source closed-circuit television software application.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00398 Published 2024-08-12 Fixed in 1.36.34, 1.37.61 CWE-79
TI-2024-29010 CVE-2024-43358

XSS vulnerability in filter view

Priority LOW 27

ZoneMinder is a free, open source closed-circuit television software application.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00351 Published 2024-08-12 Fixed in 1.36.34, 1.37.61 CWE-79
TI-2023-11271 CVE-2023-26037

ZoneMinder contains SQL Injection via report_event_audit

Priority MEDIUM 44

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00607 Published 2023-02-25 Fixed in 1.36.33, 1.37.33 CWE-89
TI-2023-11270 CVE-2023-26036

ZoneMinder contains Local File Inclusion vulnerability

Priority HIGH 76

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00897 Published 2023-02-25 Fixed in 1.36.33, 1.37.33 CWE-426
TI-2023-11269 CVE-2023-26035

ZoneMinder vulnerable to Missing Authorization

Priority HIGH 82

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.80462 Published 2023-02-25 Fixed in 1.36.33, 1.37.33 CWE-862
TI-2023-11268 CVE-2023-26034

ZoneMinder SQL Injection

Priority HIGH 76

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.01592 Published 2023-02-25 Fixed in 1.36.33, 1.37.33 CWE-89
Load more