Lucene search
K

6 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/27 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2019-7337

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without...

4.8CVSS6.8AI score0.00235EPSS
Exploits1References2
Veracode
Veracode
added 2021/09/30 5:56 a.m.18 views

Cross-site Scripting (XSS)

zoneminder is vulnerable to Cross Site Scripting. The vulnerability exists due to a lack of validation of the function sortHeader in functions.php which insecurely returns the value of the limit query string parameter without applying any filtration...

4.8CVSS1.3AI score0.00235EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2019/02/04 7:29 p.m.1 views

UBUNTU-CVE-2019-7337

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader in functions.php, which insecurely returns the...

4.8CVSS6.7AI score0.00235EPSS
Exploits1References3
NVD
NVD
added 2019/02/04 7:29 p.m.7 views

CVE-2019-7337

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader in functions.php, which insecurely returns the...

4.8CVSS4.9AI score0.00235EPSS
Exploits1References1
OSV
OSV
added 2019/02/04 7:29 p.m.1 views

DEBIAN-CVE-2019-7337

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader in functions.php, which insecurely returns the...

4.8CVSS6.5AI score0.00235EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2019/02/04 7:0 p.m.19 views

CVE-2019-7337

Reflected Cross Site Scripting XSS exists in ZoneMinder through 1.32.3 as the view 'events' events.php insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader in functions.php, which insecurely returns the...

4.8CVSS1.3AI score0.00235EPSS
Exploits1
Rows per page
Query Builder