Login Request a demo
ZO
Vendor
Zoneminder
1 product with CVEs on record
96
CVEs
0
On KEV
4
New 30D
Products
ZO
zoneminder
Zoneminder
9.9
96 CVEs0 on KEV4 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-30971
ZO
zoneminder
ZoneMinder
8.8
1%
Oct 16ZoneMinder: Authenticated RCE via command injection in monitor Device Path
CVE-2026-102608
ZO
zoneminder
ZoneMinder
9.0
0%
Oct 16ZoneMinder: Authenticated OS Command Injection via unsanitized Monitor Name in event export (download_functions.php)
CVE-2026-102607
ZO
zoneminder
ZoneMinder
8.8
0%
Oct 16ZoneMinder: Authenticated OS Command Injection (RCE) via Export Feature
CVE-2026-104198
ZO
zoneminder
ZoneMinder
5.3
0%
Oct 15ZoneMinder failed token handling bypasses web authentication
CVE-2026-102297
ZO
zoneminder
ZoneMinder
4.3
0%
Sep 28ZoneMinder before 1.38.4 Incorrect Authorization in frames API index
CVE-2026-102296
ZO
zoneminder
ZoneMinder
6.5
0%
Sep 28ZoneMinder before 1.38.4 Buffer Overflow via HTTP Camera Response
CVE-2024-58386
ZO
zoneminder
ZoneMinder
6.5
0%
Sep 28ZoneMinder 1.37.x Path Traversal via files view
CVE-2026-54258
ZO
zoneminder
ZoneMinder
6.5
0%
Sep 11Cross-monitor event media authorization bypass in direct event media endpoints
CVE-2026-76060
ZO
Zoneminder
Zoneminder
8.8
2%
Aug 27OS Command Injection in PayRange API
CVE-2026-72556
ZO
ZoneMinder
ZoneMinder
8.8
1%
Aug 11ZoneMinder ZoneMinder - Remote Code Execution
CVE-2026-27470
ZO
zoneminder
ZoneMinder
8.8
1%
Feb 21ZoneMinder: Second-Order SQL Injection in `getNearEvents()` via Stored Event Name and Cause Fields
CVE-2025-65791
ZO
Zoneminder
Zoneminder
9.8
2%
Feb 18ZoneMinder v1.36.34 is vulnerable to Command Injection in web/views/image.php
CVE-2024-51482
ZO
zoneminder
ZoneMinder
9.9
37%
Oct 31Boolean-based SQL Injection in ZoneMinder v1.37.* <= 1.37.64
CVE-2023-31493
ZO
Zoneminder
Zoneminder
6.6
0%
Oct 15RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted payload and escalate…
CVE-2024-43360
ZO
zoneminder
ZoneMinder
9.8
6%
Aug 12ZoneMinder Time-based SQL Injection
CVE-2024-43359
ZO
zoneminder
ZoneMinder
6.1
0%
Aug 12XSS vulnerabilities in montagereview
CVE-2024-43358
ZO
zoneminder
ZoneMinder
6.1
0%
Aug 12XSS vulnerability in filter view
CVE-2023-41884
ZO
zoneminder
ZoneMinder
6.5
1%
Aug 12ZoneMinder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in watch.php
CVE-2020-25730
ZO
Zoneminder
Zoneminder
8.2
1%
Apr 4Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive…
CVE-2023-26039
ZO
Zoneminder
Zoneminder
8.8
1%
Feb 25ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras
CVE-2023-26038
ZO
Zoneminder
Zoneminder
6.5
1%
Feb 25ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras
CVE-2023-26037
ZO
Zoneminder
Zoneminder
9.8
1%
Feb 25ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras
CVE-2023-26036
ZO
Zoneminder
Zoneminder
9.8
1%
Feb 25ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras
CVE-2023-26035
ZO
Zoneminder
Zoneminder
9.8
80%
Feb 25ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras
CVE-2023-26034
ZO
Zoneminder
Zoneminder
8.8
2%
Feb 25ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras
CVE-2023-26032
ZO
Zoneminder
Zoneminder
8.1
1%
Feb 25ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras
CVE-2023-25825
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 25ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras
CVE-2022-30769
ZO
Zoneminder
Zoneminder
4.6
1%
Nov 15Session fixation exists in ZoneMinder through 1.36.12 as an attacker can poison a session cookie to the next logged-in user
CVE-2022-30768
ZO
Zoneminder
Zoneminder
5.4
1%
Nov 15A Stored Cross Site Scripting (XSS) issue in ZoneMinder 1.36.12 allows an attacker to execute HTML or JavaScript code via the Username field when an Admin (or non-Admin users that…
CVE-2022-39290
ZO
zoneminder
ZoneMinder
6.5
8%
Oct 7CSRF key bypass using HTTP methods in zoneminder
CVE-2022-39291
ZO
zoneminder
ZoneMinder
5.4
7%
Oct 7Denial of service through logs in zoneminder
CVE-2022-39285
ZO
zoneminder
ZoneMinder
5.4
5%
Oct 7Stored Cross-Site Scripting Vulnerability In File Parameter in zoneminder
CVE-2022-39289
ZO
zoneminder
ZoneMinder
7.5
1%
Oct 7Database log access in ZoneMinder
CVE-2022-29806
ZO
Zoneminder
Zoneminder
9.8
67%
Apr 26ZoneMinder before 1.36.13 allows remote code execution via an invalid language
CVE-2020-25729
ZO
Zoneminder
Zoneminder
6.1
1%
Sep 17ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php
CVE-2019-13072
ZO
Zoneminder
Zoneminder
5.4
1%
Jun 30Stored XSS in the Filters page (Name field) in ZoneMinder 1.32.3 allows a malicious user to embed and execute JavaScript code in the browser of any user who navigates to this page
CVE-2019-8424
ZO
Zoneminder
Zoneminder
9.8
2%
Feb 18ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter
CVE-2019-8428
ZO
Zoneminder
Zoneminder
9.8
2%
Feb 18ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value
CVE-2019-8429
ZO
Zoneminder
Zoneminder
9.8
2%
Feb 18ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter
CVE-2019-8426
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 18skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter
CVE-2019-8425
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 18includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages
CVE-2019-8427
ZO
Zoneminder
Zoneminder
9.8
3%
Feb 18daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters
CVE-2019-8423
ZO
Zoneminder
Zoneminder
9.8
2%
Feb 18ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter
CVE-2019-7345
ZO
Zoneminder
Zoneminder
4.8
1%
Feb 4Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view 'options' (options.php) does no input validation for the WEB_TITLE, HOME_URL,…
CVE-2019-7325
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as multiple views under web/skins/classic/views insecurely utilize $_REQUEST['PHP_SELF'], without…
CVE-2019-7326
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Host' parameter value in…
CVE-2019-7327
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the…
CVE-2019-7328
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'scale' parameter value in the…
CVE-2019-7329
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the form action on multiple views utilizes $_SERVER['PHP_SELF'] insecurely, mishandling any arbitrary…
CVE-2019-7330
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'show' parameter value in the…
CVE-2019-7331
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 while editing an existing monitor field named "signal check color" (monitor.php)
CVE-2019-7332
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'eid' (aka Event ID) parameter…
CVE-2019-7333
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in…
CVE-2019-7334
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'Exportfile' parameter value in…
CVE-2019-7335
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'log' as it insecurely prints the 'Log Message' value on…
CVE-2019-7336
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Self - Stored Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, as the view _monitor_filters.php contains takes in input from the user and saves it into the session,…
CVE-2019-7337
ZO
Zoneminder
Zoneminder
4.8
1%
Feb 4Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' (events.php) insecurely displays the limit parameter value, without applying any…
CVE-2019-7338
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4Self - Stored XSS exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code in the view 'group' as it insecurely prints the 'Group Name' value…
CVE-2019-7339
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'level' parameter value in the view…
CVE-2019-7340
ZO
Zoneminder
Zoneminder
6.1
1%
Feb 4POST - Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3, allowing an attacker to execute HTML or JavaScript code via a vulnerable 'filter[Query][terms][0][val]'…