https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 06 Nov 2026 15:24:55 +0000 https://db.gcve.eu/vuln/cleanstart-2023-wu21841 <p><strong>Affected:</strong> CleanStart: zoneminder</p> <p>Security vulnerability affects the zoneminder package. A file disclosure and inclusion vulnerability exists in web/views/file.</p> <p><strong>Affected:</strong> CleanStart: zoneminder</p> <p>Security vulnerability affects the zoneminder package. A file disclosure and inclusion vulnerability exists in web/views/file.</p> https://db.gcve.eu/vuln/cleanstart-2023-wu21841 https://db.gcve.eu/vuln/cnvd-2017-01288 cnvd-2017-01288 https://db.gcve.eu/vuln/cnvd-2017-01288 https://db.gcve.eu/vuln/fkie_cve-2017-5595 <p>A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&amp;path= request.</p> <p>A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&amp;path= request.</p> https://db.gcve.eu/vuln/fkie_cve-2017-5595 https://db.gcve.eu/vuln/ghsa-88gp-83c5-44hg <p>A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&amp;path= request.</p> <p>A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&amp;path= request.</p> https://db.gcve.eu/vuln/ghsa-88gp-83c5-44hg https://db.gcve.eu/vuln/gsd-2017-5595 gsd-2017-5595 https://db.gcve.eu/vuln/gsd-2017-5595 https://db.gcve.eu/vuln/ubuntu-cve-2017-5595 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: zoneminder</p> <p>A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&amp;path= request.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: zoneminder</p> <p>A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&amp;path= request.</p> https://db.gcve.eu/vuln/ubuntu-cve-2017-5595