Skip to content
OpenAdvisories

Archive

25 February 2023

Vulnerabilities first published on this day (UTC), newest first.

← January 2023 2023 / February /25 March 2023 →
  1. 1120
  2. 250
  3. 3117
  4. 416
  5. 53
  6. 6187
  7. 784
  8. 875
  9. 9125
  10. 1074
  11. 115
  12. 1216
  13. 13119
  14. 14203
  15. 1594
  16. 16172
  17. 17101
  18. 1814
  19. 199
  20. 2051
  21. 2185
  22. 2261
  23. 2357
  24. 2452
  25. 2518
  26. 2621
  27. 27145
  28. 28115
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2023-26104

    Denial of Service vulnerability in lite-web-server

    All versions of the package lite-web-server are vulnerable to Denial of Service (DoS) when an attacker sends an HTTP request and includes control characters that the decodeURI() function is unable to parse.

    lite-web-server npm
  • High 7.1
    CVE-2023-26039 Public exploit

    ZoneMinder vulnerable to OS Command injection in daemonControl() API

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl() in (/web/api/app/Controller/HostCon…

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu
  • High 8.9
    CVE-2023-26037

    ZoneMinder contains SQL Injection via report_event_audit

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an SQL Injection. The minTime and maxTime request parameters are not properly v…

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu
  • High 8.1
    CVE-2023-26036

    ZoneMinder contains Local File Inclusion vulnerability

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion (Untrusted Search Path) vulnerability via /web/index.php…

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu
  • High 7.2
    CVE-2023-26035 Public exploit Scanner template EPSS 80%

    ZoneMinder vulnerable to Missing Authorization

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. Ther…

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu Alpine
  • High 8.9
    CVE-2023-26032

    ZoneMinder contains SQL injection via malicious Jason Web Token

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain SQL Injection via malicious jason web token. The Username field of the JWT toke…

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu
  • High 7.7
    CVE-2023-25825

    ZoneMinder contains Cross-site Scripting via log viewing

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 are vulnerable to Cross-site Scripting. Log entries can be injected into the database logs, contain…

    ZoneMinder zoneminder zoneminder zoneminder Debian Ubuntu
  • High 7.8
    CVE-2023-26544

    In the Linux kernel 6.0.8, there is a use-after-free in run_unpack in fs/ntfs3/run.c, related to a difference between N…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • High 8.8
    CVE-2022-48362

    Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName…