Поиск уязвимостей
Количество 15
Количество 15
ALT-PU-2022-2771
ALT-PU-2022-2771: package `zoneminder` update to version 1.36.26-alt1
ALT-PU-2022-2575
ALT-PU-2022-2575: package `zoneminder` update to version 1.36.25-alt1
CVE-2022-29806
ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability.
CVE-2022-29806
ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability.
CVE-2022-29806
ZoneMinder before 1.36.13 allows remote code execution via an invalid ...
GHSA-xr7v-8xc4-62vc
ZoneMinder before 1.36.13 allows remote code execution via an invalid language.
BDU:2023-01774
Уязвимость программного обеспечения для организации видеонаблюдения ZoneMinder, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю выполнить произвольный код
CVE-2022-30769
Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user.
CVE-2022-30769
Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user.
CVE-2022-30769
Session fixation exists in ZoneMinder through 1.36.12 as an attacker c ...
CVE-2022-30768
A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.
CVE-2022-30768
A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.
CVE-2022-30768
A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows ...
GHSA-mjxc-g8h2-2g9g
A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method.
GHSA-7jhg-5532-mghv
Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user.
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2022-2771 ALT-PU-2022-2771: package `zoneminder` update to version 1.36.26-alt1 | CVSS3: 9.8 | около 4 лет назад | |
| ALT-PU-2022-2575 ALT-PU-2022-2575: package `zoneminder` update to version 1.36.25-alt1 | CVSS3: 9.8 | около 4 лет назад | |
 | CVE-2022-29806 ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability. | CVSS3: 9.8 | 67% Средний | больше 4 лет назад |
 | CVE-2022-29806 ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contributes to exploitability. | CVSS3: 9.8 | 67% Средний | больше 4 лет назад |
| CVE-2022-29806 ZoneMinder before 1.36.13 allows remote code execution via an invalid ... | CVSS3: 9.8 | 67% Средний | больше 4 лет назад |
| GHSA-xr7v-8xc4-62vc ZoneMinder before 1.36.13 allows remote code execution via an invalid language. | CVSS3: 9.8 | 67% Средний | больше 4 лет назад |
 | BDU:2023-01774 Уязвимость программного обеспечения для организации видеонаблюдения ZoneMinder, связанная с неверным ограничением имени пути к каталогу с ограниченным доступом, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 67% Средний | почти 5 лет назад |
| CVE-2022-30769 Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user. | CVSS3: 4.6 | 1% Низкий | почти 4 года назад |
| CVE-2022-30769 Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user. | CVSS3: 4.6 | 1% Низкий | почти 4 года назад |
| CVE-2022-30769 Session fixation exists in ZoneMinder through 1.36.12 as an attacker c ... | CVSS3: 4.6 | 1% Низкий | почти 4 года назад |
| CVE-2022-30768 A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method. | CVSS3: 5.4 | 1% Низкий | почти 4 года назад |
| CVE-2022-30768 A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method. | CVSS3: 5.4 | 1% Низкий | почти 4 года назад |
| CVE-2022-30768 A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows ... | CVSS3: 5.4 | 1% Низкий | почти 4 года назад |
| GHSA-mjxc-g8h2-2g9g A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. NOTE: this exists in later versions than CVE-2019-7348 and requires a different attack method. | CVSS3: 5.4 | 1% Низкий | почти 4 года назад |
| GHSA-7jhg-5532-mghv Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user. | CVSS3: 4.6 | 1% Низкий | почти 4 года назад |
Уязвимостей на страницу