Skip to content
OpenAdvisories

Archive

25 February 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.1
    CVE-2023-26039 Public exploit

    ZoneMinder vulnerable to OS Command injection in daemonControl() API

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Injection via daemonControl() in (/web/api/app/Controller/HostCon…

  • High 7.2
    CVE-2023-26035 Public exploit Scanner template EPSS 80%

    ZoneMinder vulnerable to Missing Authorization

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. Ther…