CVE-2024-51482

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

ZoneMinder is a free, open source closed-circuit television software application. ZoneMinder v1.37.* <= 1.37.64 is vulnerable to boolean-based SQL Injection in function of web/ajax/event.php. This is fixed in 1.37.65.

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
ZoneMinder	zoneminder	>= 1.37.0, < 1.37.65
zoneminder	zoneminder	>= 1.37.0, <= 1.37.64

References

Timeline

Published: Oct 31, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-514836.9changedetection.io is free, open source web page change detection software. Prior to version 0.47.5, when a WebDriver is used to fetch files CVE-2024-514848.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly val CVE-2024-514858.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly val CVE-2024-514868.4Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache CVE-2024-514878.1Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly val CVE-2024-514885.4Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately v CVE-2024-514895.4Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing does not adequately v CVE-2024-51495.3The BuddyForms plugin for WordPress is vulnerable to Email Verification Bypass in all versions up to, and including, 2.8.9 via the use of an CVE-2024-514909.0Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache CVE-2024-514913.3notion-go is a collection of libraries for supporting sign and verify OCI artifacts. Based on Notary Project specifications. The issue was i CVE-2024-514928.8Zusam is a free and open-source way to self-host private forums. Prior to version 0.5.6, specially crafted SVG files uploaded to the service CVE-2024-514936.5OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.2 contain a vulnerab