Search CVE reports
51 – 60 of 85 results
CVE-2019-7335
Medium prioritySelf - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on the web page without applying any...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Vulnerable | Vulnerable | Vulnerable | Not in release | Vulnerable |
CVE-2019-7334
Medium priorityReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view export (export.php) because...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Vulnerable | Vulnerable | Vulnerable | Not in release | Vulnerable |
CVE-2019-7333
Medium priorityReflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in the view download (download.php) because proper...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Vulnerable | Vulnerable | Vulnerable | Not in release | Not affected |
CVE-2019-7332
Medium prioritySome fixes available 1 of 7
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' (aka Event ID) parameter value in the view download (download.php) because...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Fixed | Not in release | Not affected |
CVE-2019-7331
Medium prioritySome fixes available 2 of 8
Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php). There exists no input validation or output filtration, leaving it...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Fixed | Not in release | Fixed |
CVE-2019-7330
Medium prioritySome fixes available 1 of 7
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the view frame (frame.php) because proper filtration is omitted.
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Fixed | Not in release | Not affected |
CVE-2019-7329
Medium prioritySome fixes available 2 of 8
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary input appended to the webroot URL, without any...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Fixed | Not in release | Fixed |
CVE-2019-7328
Medium prioritySome fixes available 1 of 7
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) via /js/frame.js.php because...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Fixed | Not in release | Not affected |
CVE-2019-7327
Medium prioritySome fixes available 1 of 7
Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the view frame (frame.php) because proper filtration is omitted.
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Fixed | Not in release | Not affected |
CVE-2019-7326
Medium prioritySome fixes available 1 of 7
Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in the view console (console.php) because proper...
1 affected packages
zoneminder
| Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS | 16.04 LTS |
|---|---|---|---|---|---|
| zoneminder | Not affected | Not affected | Fixed | Not in release | Not affected |