Lucene search
K

12 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 5:37 a.m.6 views

CVE-2023-26036

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion Untrusted Search Path vulnerability via /web/index.php. By controlling $view, any local file...

9.8CVSS6.5AI score0.00417EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2023-26036

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33...

9.8CVSS7.3AI score0.00417EPSS
Exploits1References3
NVD
NVD
added 2024/06/13 8:15 a.m.14 views

CVE-2024-26036

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS0.01615EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/06/13 7:52 a.m.16 views

CVE-2024-26036 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS0.01615EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/06/13 7:52 a.m.15 views

CVE-2024-26036 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Experience Manager versions 6.5.20 and earlier are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page...

5.4CVSS5.3AI score0.01615EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2023/02/25 1:13 a.m.6 views

CVE-2023-26036 ZoneMinder contains Local File Inclusion vulnerability

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain a Local File Inclusion Untrusted Search Path vulnerability via /web/index.php. By controlling $view, any local file...

8.1CVSS8.9AI score0.00417EPSS
Exploits1References1
CVE
CVE
added 2023/02/25 1:13 a.m.54 views

CVE-2023-26036

ZoneMinder contains a Local File Inclusion via /web/index.php. The root cause is improper sandboxing in detaintPath used to sanitize the $view parameter, allowing crafted paths such as ..././ to be resolved to ../. This can enable execution of local PHP files. The vulnerability affects versions p...

9.8CVSS8.6AI score0.00417EPSS
Exploits1References1Affected Software1
OpenVAS
OpenVAS
added 2021/07/08 12:0 a.m.24 views

Joomla! 2.5.0 - 3.9.27 Multiple Vulnerabilities

Joomla! is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescription...

7.5CVSS6.3AI score0.00014EPSS
Exploits0References1
CVE
CVE
added 2021/07/07 10:12 a.m.237 views

CVE-2021-26036

CVE-2021-26036 affects Joomla! 2.5.0 through 3.9.27 due to missing input validation that can corrupt the usergroups table. Impact is described as a DoS via manipulation of usergroup data, with CVSS scores indicating NETWORK attack, low complexity, and availability impact HIGH in CVSS v3.1 (base 7...

7.5CVSS7.3AI score0.00014EPSS
In wildExploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/07/06 12:0 a.m.70 views

CVE-2021-26036

An issue was discovered in Joomla! 2.5.0 through 3.9.27. Missing validation of input could lead to a broken usergroups table. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS2.3AI score0.00014EPSS
In wildExploits0References2
Cvelist
Cvelist
added 1976/01/01 12:0 a.m.22 views

CVE-2026-26036

...

Exploits0
CVE
CVE
added 1976/01/01 12:0 a.m.5 views

CVE-2026-26036

CVE-2026-26036 entry is rejected and not used, per the Initial Description.

5.4AI score
Exploits0
Rows per page
Query Builder