2 CVEs publicados el 2022-05-13 · CVSS máximo 9.8/10.
Productos afectados (catálogo NVD)
zoneminder/zoneminder
CVEs de este lote
| CVE | Severidad | CVSS | EPSS | Estado | Descripción |
|---|---|---|---|---|---|
| CVE-2019-6991 | CRITICAL | 9.8 | 3.3% | A classic Stack-based buffer overflow exists in the zmLoadUser() function in zm_user.cpp of the zmu binary in ZoneMinder through 1.32.3, allowing an unauthenticated attacker to execute code via a… | |
| CVE-2019-8427 | CRITICAL | 9.8 | 2.8% | daemonControl in includes/functions.php in ZoneMinder before 1.32.3 allows command injection via shell metacharacters. |