zoneminder Vulnerability Advisory Catalog

Total 85 security vulnerabilities recorded for zoneminder software and firmware.

← Back to All Vendors
Component: zoneminder

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.36.37 and below and 1.37.61 through 1.38.0, there is a...

📅 2026-02-21
CVSS 8.8 Dossier →
CVE-2025-65791 CRITICAL
Component: zoneminder

ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php. The application passes unsanitized user input directly to the exec() fu...

📅 2026-02-18
CVSS 9.8 Dossier →
Component: zoneminder

RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a c...

📅 2024-10-15
CVSS 6.6 Dossier →
CVE-2024-43360 CRITICAL
Component: zoneminder

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder is affected by a time-based SQL Injection vulnerability. ...

📅 2024-08-12
CVSS 9.8 Dossier →
CVE-2024-43359 UNKNOWN
Component: zoneminder

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the montagere...

📅 2024-08-12
Component: zoneminder

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder has a cross-site scripting vulnerability in the filter vi...

📅 2024-08-12
CVSS 6.1 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query w...

📅 2024-08-12
CVSS 7.1 Dossier →
Component: zoneminder

Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, an...

📅 2024-04-04
CVSS 8.2 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior t...

📅 2023-02-25
CVSS 7.1 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior t...

📅 2023-02-25
CVSS 5.4 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior t...

📅 2023-02-25
CVSS 8.9 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior t...

📅 2023-02-25
CVSS 8.1 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior t...

📅 2023-02-25
CVSS 7.2 Dossier →
CVE-2023-26034 CRITICAL
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior t...

📅 2023-02-25
CVSS 9.6 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior t...

📅 2023-02-25
CVSS 8.9 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior t...

📅 2023-02-25
CVSS 7.7 Dossier →
Component: zoneminder

Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user....

📅 2022-11-15
CVSS 4.6 Dossier →
Component: zoneminder

A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an A...

📅 2022-11-15
CVSS 5.4 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application. Affected versions of zoneminder are subject to a vulnerability which...

📅 2022-10-07
CVSS 5.4 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions authenticated users can bypass CSRF keys by mod...

📅 2022-10-07
CVSS 8.0 Dossier →
CVE-2022-39289 CRITICAL
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application. In affected versions the ZoneMinder API Exposes Database Log content...

📅 2022-10-07
CVSS 9.1 Dossier →
Component: zoneminder

ZoneMinder is a free, open source Closed-circuit television software application The file parameter is vulnerable to a cross site scripting vulnerabil...

📅 2022-10-07
CVSS 7.6 Dossier →
CVE-2022-29806 CRITICAL
Component: zoneminder

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an arbitrary pathname contribute...

📅 2022-04-26
CVSS 9.8 Dossier →
Component: zoneminder

ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php....

📅 2020-09-17
CVSS 6.1 Dossier →
Page 1 of 4 (85 Total Records)