https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T17:03:41.391260+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2024-58386 fkie_cve-2024-58386 2026-09-30T17:03:41.437067+00:00

ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is not properly validated before being passed to output_file, enabling attackers with Events view permission to access sensitive files like configuration files containing database credentials.

 https://db.gcve.eu/vuln/ghsa-rv7j-2hq3-r6fq GHSA-rv7j-2hq3-r6fq 2026-09-30T17:03:41.437182+00:00

ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is not properly validated before being passed to output_file, enabling attackers with Events view permission to access sensitive files like configuration files containing database credentials.

 https://db.gcve.eu/vuln/ubuntu-cve-2024-58386 UBUNTU-CVE-2024-58386 2026-09-30T17:03:41.437206+00:00

Affected: Ubuntu:Pro:16.04:LTS: zoneminder, Ubuntu:Pro:20.04:LTS: zoneminder, Ubuntu:Pro:22.04:LTS: zoneminder, Ubuntu:24.04:LTS: zoneminder, Ubuntu:26.04:LTS: zoneminder

ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is not properly validated before being passed to output_file, enabling attackers with Events view permission to access sensitive files like configuration files containing database credentials.