Search CVE reports
21 – 30 of 90 results
Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user.
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Not in release |
A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform)...
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Not in release |
ZoneMinder is a free, open source Closed-circuit television software application. Affected versions of zoneminder are subject to a vulnerability which allows users with "View" system permissions to inject new data into the logs...
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Not in release |
ZoneMinder is a free, open source Closed-circuit television software application. In affected versions authenticated users can bypass CSRF keys by modifying the request supplied to the Zoneminder web application....
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Not in release |
ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log contents to user without privileges, allows insertion, modification, deletion of logs...
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Not in release |
ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "td" brackets. This then allows a...
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Not in release |
Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data,...
2 affected packages
zoneminder, netdata
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
| netdata | Not in release | Not affected | Not affected | Not affected | Not affected |
Some fixes available 3 of 4
ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability.
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Fixed | Fixed | Not in release |
This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array (instead of a string) even if...
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | — |
ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.
1 affected package
zoneminder
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| zoneminder | — | — | Not affected | Not affected | Not in release |