https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T22:32:53.588108+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2023-yu62045 CLEANSTART-2023-YU62045 — Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1 2026-11-06T22:32:53.593229+00:00

Affected: CleanStart: zoneminder

Security vulnerability affects the zoneminder package. Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.

 https://db.gcve.eu/vuln/cnvd-2022-57822 cnvd-2022-57822 2026-11-06T22:32:53.593316+00:00 cnvd-2022-57822 https://db.gcve.eu/vuln/fkie_cve-2019-7337 fkie_cve-2019-7337 2026-11-06T22:32:53.593352+00:00

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader() in functions.php, which insecurely returns the value of the limit query string parameter without applying any filtration.

 https://db.gcve.eu/vuln/ghsa-prfp-rc42-5739 GHSA-prfp-rc42-5739 2026-11-06T22:32:53.593399+00:00

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader() in functions.php, which insecurely returns the value of the limit query string parameter without applying any filtration.

 https://db.gcve.eu/vuln/gsd-2019-7337 gsd-2019-7337 2026-11-06T22:32:53.593428+00:00 gsd-2019-7337 https://db.gcve.eu/vuln/ubuntu-cve-2019-7337 UBUNTU-CVE-2019-7337 2026-11-06T22:32:53.593446+00:00

Affected: Ubuntu:Pro:16.04:LTS: zoneminder, Ubuntu:Pro:20.04:LTS: zoneminder, Ubuntu:Pro:22.04:LTS: zoneminder, Ubuntu:24.04:LTS: zoneminder, Ubuntu:25.10: zoneminder, Ubuntu:26.10: zoneminder, Ubuntu:26.04:LTS: zoneminder

Reflected Cross Site Scripting (XSS) exists in ZoneMinder through 1.32.3 as the view 'events' (events.php) insecurely displays the limit parameter value, without applying any proper output filtration. This issue exists because of the function sortHeader() in functions.php, which insecurely returns the value of the limit query string parameter without applying any filtration.