zoneminder | Snyk

Direct Vulnerabilities

Known vulnerabilities in the zoneminder package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L OS Command Injection	*
M Incorrect Authorization	*
M Buffer Overflow	*
M Directory Traversal	*
L Authorization Bypass Through User-Controlled Key	*
L OS Command Injection	*
C Deserialization of Untrusted Data	<1.32.3-2
C Deserialization of Untrusted Data	<1.32.3-2
L CVE-2026-72556	*
L SQL Injection	*
L CVE-2025-65791	*
C SQL Injection	<1.36.35+dfsg1-1
M Cross-site Scripting (XSS)	<1.36.35+dfsg1-1
M Cross-site Scripting (XSS)	<1.36.35+dfsg1-1
M SQL Injection	<1.36.35+dfsg1-1
L CVE-2023-31493	*
H OS Command Injection	<1.36.33+dfsg1-1
M Untrusted Search Path	<1.36.33+dfsg1-1
C SQL Injection	<1.36.33+dfsg1-1
C Untrusted Search Path	<1.36.33+dfsg1-1
C Missing Authorization	<1.36.33+dfsg1-1
H SQL Injection	<1.36.33+dfsg1-1
H SQL Injection	<1.36.33+dfsg1-1
M Cross-site Scripting (XSS)	<1.36.33+dfsg1-1
M Improper Input Validation	<1.36.31+dfsg1-1
M Improper Authentication	<1.36.31+dfsg1-1
H Missing Authorization	<1.36.31+dfsg1-1
M Cross-site Scripting (XSS)	<1.36.31+dfsg1-1
M Session Fixation	*
M Cross-site Scripting (XSS)	*
C Directory Traversal	<1.36.13+dfsg1-1
L CVE-2020-25730	<1.34.21-1
M Cross-site Scripting (XSS)	<1.34.21-1
M Cross-site Scripting (XSS)	<1.34.6-1
H Cross-site Request Forgery (CSRF)	<1.30.4+dfsg-1
H Session Fixation	<1.30.4+dfsg-1
C SQL Injection	<1.30.4+dfsg-1
M Cross-site Scripting (XSS)	<1.30.4+dfsg-1
M Cross-site Scripting (XSS)	<1.30.4+dfsg-1
M Cross-site Scripting (XSS)	<1.30.4+dfsg-1
H Information Exposure	<1.30.4+dfsg-1
M Cross-site Scripting (XSS)	*
C SQL Injection	*
C SQL Injection	<1.34.6-1
C OS Command Injection	*
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	*
C SQL Injection	<1.34.6-1
C SQL Injection	*
M Cross-site Scripting (XSS)	<1.34.6-1
M Arbitrary Code Injection	*
H Session Fixation	*
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
H Time-of-check Time-of-use (TOCTOU)	<1.34.6-1
H Cross-site Request Forgery (CSRF)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.34.6-1
M Cross-site Scripting (XSS)	<1.32.3-2
C Out-of-bounds Write	<1.32.3-2
M Cross-site Scripting (XSS)	<1.32.3-2
M Cross-site Scripting (XSS)	<1.32.3-2
M Cross-site Scripting (XSS)	<1.30.4+dfsg-1
M Information Exposure	<1.30.4+dfsg-1
H Cross-site Request Forgery (CSRF)	<1.30.4+dfsg-1
M Cross-site Scripting (XSS)	<1.30.4+dfsg-1
M Directory Traversal	<1.25.0-1
H CVE-2013-0232	<1.25.0-4
M Access Restriction Bypass	<1.22.3-5
M Access Restriction Bypass	<1.24.1-1
C Arbitrary Code Injection	<1.24.1-1
M Cross-site Scripting (XSS)	<1.24.1-1
H SQL Injection	<1.24.1-1
H Arbitrary Code Injection	<1.23.3-1
H CVE-2004-0227	<1.22.3-1

Vulnerability

Vulnerable Version

OS Command Injection