Approved changes feed: RSS · Atom

cpe:2.3:a:zoneminder:zoneminder:1.24.0:*:*:*:*:*:*:*

part: a version: 1.24.0 update: *

VendorZoneminder (e6e02621-7fd3-519d-9da5-7d751a0c0507)
ProductZoneminder (bce2b260-429d-537f-a893-eaa0ebd37c1c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/zoneminder purl2cpe 2026-06-01 10:11:26.756669
pkg:deb/ubuntu/zoneminder purl2cpe 2026-06-01 10:11:26.756671
pkg:github/zoneminder/zoneminder purl2cpe 2026-06-01 10:11:26.756672
pkg:rpm/opensuse/zoneminder purl2cpe 2026-06-01 10:11:26.756673
pkg:sourceforge/zoneminder purl2cpe 2026-06-01 10:11:26.756675

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0332 vulnerable 2026-06-08 05:03:47.096040 Details available
Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) view, (2) request, or (3) action parameter.
Published: 2013-03-20T15:00:00.000Z
Updated: 2024-09-16T17:38:26.458Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2013-0232 vulnerable 2026-06-08 05:03:46.244323 Details available
includes/functions.php in ZoneMinder Video Server 1.24.0, 1.25.0, and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) runState parameter in the packageControl function; or (2) key or (3) command parameter in the setDeviceStatusX10 function.
Published: 2013-03-20T15:00:00.000Z
Updated: 2024-08-06T14:18:09.478Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.