<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://db.gcve.eu/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-11-06T11:48:30.781032+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>info@gcve.eu</email>
  </author>
  <link href="https://db.gcve.eu" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://db.gcve.eu/vuln/cleanstart-2023-tm33873</id>
    <title>CLEANSTART-2023-TM33873 — Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1</title>
    <updated>2026-11-06T11:48:30.784306+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> CleanStart: zoneminder</p>
<p>Security vulnerability affects the zoneminder package. Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.</p></div>
    </content>
    <link href="https://db.gcve.eu/vuln/cleanstart-2023-tm33873"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/cnvd-2017-01282</id>
    <title>cnvd-2017-01282</title>
    <updated>2026-11-06T11:48:30.784354+00:00</updated>
    <content>cnvd-2017-01282</content>
    <link href="https://db.gcve.eu/vuln/cnvd-2017-01282"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/fkie_cve-2017-5367</id>
    <title>fkie_cve-2017-5367</title>
    <updated>2026-11-06T11:48:30.784374+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample parameters could include action=login&amp;view=postlogin[XSS] view=console[XSS] view=groups[XSS] view=events&amp;filter[terms][1][cnj]=and[XSS] view=events&amp;filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&amp;filter%5Bterms%5D%5B1%5D%5Bcnj%5D=[XSS]and view=events&amp;limit=1%22%3E%3C/a%3E[XSS] (among others).</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/fkie_cve-2017-5367"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/ghsa-84wq-hwp8-vwxc</id>
    <title>GHSA-84wq-hwp8-vwxc</title>
    <updated>2026-11-06T11:48:30.784402+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample parameters could include action=login&amp;view=postlogin[XSS] view=console[XSS] view=groups[XSS] view=events&amp;filter[terms][1][cnj]=and[XSS] view=events&amp;filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&amp;filter%5Bterms%5D%5B1%5D%5Bcnj%5D=[XSS]and view=events&amp;limit=1%22%3E%3C/a%3E[XSS] (among others).</p>
      </div>
    </content>
    <link href="https://db.gcve.eu/vuln/ghsa-84wq-hwp8-vwxc"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/gsd-2017-5367</id>
    <title>gsd-2017-5367</title>
    <updated>2026-11-06T11:48:30.784420+00:00</updated>
    <content>gsd-2017-5367</content>
    <link href="https://db.gcve.eu/vuln/gsd-2017-5367"/>
  </entry>
  <entry>
    <id>https://db.gcve.eu/vuln/ubuntu-cve-2017-5367</id>
    <title>UBUNTU-CVE-2017-5367</title>
    <updated>2026-11-06T11:48:30.784430+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: zoneminder</p>
<p>Multiple reflected XSS vulnerabilities exist within form and link input parameters of ZoneMinder v1.30 and v1.29, an open-source CCTV server web application, which allows a remote attacker to execute malicious scripts within an authenticated client's browser. The URL is /zm/index.php and sample parameters could include action=login&amp;view=postlogin[XSS] view=console[XSS] view=groups[XSS] view=events&amp;filter[terms][1][cnj]=and[XSS] view=events&amp;filter%5Bterms%5D%5B1%5D%5Bcnj%5D=and[XSS] view=events&amp;filter%5Bterms%5D%5B1%5D%5Bcnj%5D=[XSS]and view=events&amp;limit=1%22%3E%3C/a%3E[XSS] (among others).</p></div>
    </content>
    <link href="https://db.gcve.eu/vuln/ubuntu-cve-2017-5367"/>
  </entry>
</feed>
