Known vulnerabilities in ZoneMinder - page 3

Vendor: ZoneMinder.com
Software: ZoneMinder
Software CPE: cpe:2.3:a:zoneminder_com:zoneminder:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 75
Public exploits: 7
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting ZoneMinder ZoneMinder is affected by 75 known vulnerabilities: 17 high, 25 medium, 33 low Critical High Medium Low

Vulnerabilities (75)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU158969 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 Medium
No
No
 1.38.4 03.11.2026 SB2026060474
#VU158970 - Missing Authorization
 CWE-862 Low
No
No
 1.38.4 03.11.2026 SB2026060474
#VU158968 - Authorization Bypass Through User-Controlled Key
 CWE-639 Low
No
No
 1.38.4 03.11.2026 SB2026060474
#VU158956 - Incorrect Authorization
 CWE-863 Low
No
No
 1.38.5 03.11.2026 SB2026100655
#VU158954 - Stack-based buffer overflow
 CWE-121 High
No
No
 1.38.4 03.11.2026 SB2026060474
#VU158953 - Buffer overflow
CVE-2026-102296		 CWE-120 Medium
No
No
 1.38.4 03.11.2026 SB2026060474
#VU158952 - Path Traversal: \'.../...//\'
CVE-2024-58386		 CWE-35 Low
No
No
 1.38.4 03.11.2026 SB2026060474
#VU158949 - Command injection
CVE-2026-28273		 CWE-77 Medium
No
No
 1.36.39, 1.38.2 03.11.2026 SB2026060474
#VU158947 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
 CWE-89 Low
No
No
 1.39.11 03.11.2026 SB2026060474
#VU158945 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 1.38.4 03.11.2026 SB2026060474
#VU158946 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 1.38.4 03.11.2026 SB2026060474
#VU153364 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655
#VU153363 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
 CWE-79 Low
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655
#VU153362 - Authorization Bypass Through User-Controlled Key
 CWE-639 Low
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655
#VU153361 - Incorrect Authorization
 CWE-863 Low
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655
#VU153360 - Incorrect Authorization
 CWE-863 Low
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655
#VU153359 - Incorrect Authorization
 CWE-863 Medium
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655
#VU153358 - Use of Hard-coded Cryptographic Key
 CWE-321 High
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655
#VU153357 - Heap-based Buffer Overflow
 CWE-122 Low
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655
#VU153356 - Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')
 CWE-470 Medium
No
No
 1.38.5, 1.38.6 06.10.2026 SB2026100655


Showing elements 41 - 60 out of 75