Browse CVEs

CRITICAL 9.8 CVE-2025-65791 ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() f… Zoneminder Mitigation only Fix from $2,3002026-02-18 MEDIUM 5.4 CVE-2022-30768 A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an … Zoneminder Mitigation only Fix from $1,6002022-11-15 HIGH 8.8 CVE-2017-5368 ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, is vulnerable to CSRF (Cross Site Request Forgery) which allows a remote atta… Zoneminder No fix yet Fix from $1,9502017-02-06 MEDIUM 6.1 CVE-2017-5367 Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web appl… Zoneminder No fix yet Fix from $1,6002017-02-06 HIGH 7.5 CVE-2013-0232EPSS 48% includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacha… Zoneminder No fix yet Fix from $1,9502013-03-20 MEDIUM 5.0 CVE-2013-0332EPSS 10% Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in … Zoneminder Mitigation only Fix from $1,6002013-03-20 HIGH 7.5 CVE-2008-1381 ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary comman… Zoneminder Mitigation only Fix from $1,9502008-05-01