CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2019-8432

2019-02-19

N/A

6.1 MEDIUM

In CmsEasy 7.0, there is XSS via the ckplayer.php url parameter.

CVE-2019-8429

2019-02-19

N/A

9.8 CRITICAL

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php filter[Query][terms][0][cnj] parameter.

CVE-2019-8428

2019-02-19

N/A

9.8 CRITICAL

ZoneMinder before 1.32.3 has SQL Injection via the skins/classic/views/control.php groupSql parameter, as demonstrated by a newGroup[MonitorIds][] value.

CVE-2019-8427

2020-08-24

N/A

9.8 CRITICAL

daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters.

CVE-2019-8426

2019-02-19

N/A

6.1 MEDIUM

skins/classic/views/controlcap.php in ZoneMinder before 1.32.3 has XSS via the newControl array, as demonstrated by the newControl[MinTiltRange] parameter.

CVE-2019-8425

2019-02-19

N/A

6.1 MEDIUM

includes/database.php in ZoneMinder before 1.32.3 has XSS in the construction of SQL-ERR messages.

CVE-2019-8424

2019-02-19

N/A

9.8 CRITICAL

ZoneMinder before 1.32.3 has SQL Injection via the ajax/status.php sort parameter.

CVE-2019-8423

2019-02-19

N/A

9.8 CRITICAL

ZoneMinder through 1.32.3 has SQL Injection via the skins/classic/views/events.php filter[Query][terms][0][cnj] parameter.

CVE-2019-8422

2019-02-19

N/A

7.2 HIGH

A SQL Injection vulnerability exists in PbootCMS v1.3.2 via the description parameter in appsadmincontrollercontentContentController.php.

CVE-2019-8421

2019-02-20

N/A

7.2 HIGH

upload/protected/modules/admini/views/post/index.php in BageCMS through 3.1.4 allows SQL Injection via the title or titleAlias parameter.

« Previous 1 … 5,173 5,174 5,175 5,176 5,177 … 11,258 Next »