Vulnerabilities > Zoneminder > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-08-12 | CVE-2024-43358 | Cross-site Scripting vulnerability in Zoneminder ZoneMinder is a free, open source closed-circuit television software application. | 6.1 |
| 2024-08-12 | CVE-2024-43359 | Cross-site Scripting vulnerability in Zoneminder ZoneMinder is a free, open source closed-circuit television software application. | 6.1 |
| 2024-08-12 | CVE-2023-41884 | SQL Injection vulnerability in Zoneminder ZoneMinder is a free, open source Closed-circuit television software application. | 6.5 |
| 2023-02-25 | CVE-2023-26038 | Untrusted Search Path vulnerability in Zoneminder ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. | 6.5 |
| 2023-02-25 | CVE-2023-25825 | Cross-site Scripting vulnerability in Zoneminder ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. | 6.1 |
| 2022-11-15 | CVE-2022-30768 | Cross-site Scripting vulnerability in Zoneminder 1.36.12 A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that can see other users logged into the platform) clicks on Logout. | 5.4 |
| 2022-11-15 | CVE-2022-30769 | Session Fixation vulnerability in Zoneminder Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user. | 4.6 |
| 2022-10-07 | CVE-2022-39285 | Cross-site Scripting vulnerability in Zoneminder ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerability (XSS) by backing out of the current "tr" "td" brackets. | 5.4 |
| 2022-10-07 | CVE-2022-39290 | Improper Authentication vulnerability in Zoneminder ZoneMinder is a free, open source Closed-circuit television software application. | 6.5 |
| 2022-10-07 | CVE-2022-39291 | Improper Input Validation vulnerability in Zoneminder ZoneMinder is a free, open source Closed-circuit television software application. | 5.4 |