Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:apk/alpine/zoneminder@1.36.33-r0?arch=armv7&distroversion=v3.22&reponame=community
Typeapk
Namespacealpine
Namezoneminder
Version1.36.33-r0
Qualifiers
arch armv7
distroversion v3.22
reponame community
Subpath
Is_vulnerablefalse
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-4qtk-7myx-vfcd
vulnerability_id VCID-4qtk-7myx-vfcd
summary ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-26035
reference_id
reference_type
scores
0
value 0.55722
scoring_system epss
scoring_elements 0.98074
published_at 2026-04-02T12:55:00Z
1
value 0.55722
scoring_system epss
scoring_elements 0.98078
published_at 2026-04-04T12:55:00Z
2
value 0.55722
scoring_system epss
scoring_elements 0.98079
published_at 2026-04-07T12:55:00Z
3
value 0.55722
scoring_system epss
scoring_elements 0.98083
published_at 2026-04-08T12:55:00Z
4
value 0.55722
scoring_system epss
scoring_elements 0.98084
published_at 2026-04-09T12:55:00Z
5
value 0.55722
scoring_system epss
scoring_elements 0.98089
published_at 2026-04-12T12:55:00Z
6
value 0.55722
scoring_system epss
scoring_elements 0.9809
published_at 2026-04-13T12:55:00Z
7
value 0.55722
scoring_system epss
scoring_elements 0.98095
published_at 2026-04-16T12:55:00Z
8
value 0.55722
scoring_system epss
scoring_elements 0.98097
published_at 2026-04-18T12:55:00Z
9
value 0.55722
scoring_system epss
scoring_elements 0.98093
published_at 2026-04-21T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-26035
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26035
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26035
fixed_packages
0
url pkg:apk/alpine/zoneminder@1.36.33-r0?arch=armv7&distroversion=v3.22&reponame=community
purl pkg:apk/alpine/zoneminder@1.36.33-r0?arch=armv7&distroversion=v3.22&reponame=community
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apk/alpine/zoneminder@1.36.33-r0%3Farch=armv7&distroversion=v3.22&reponame=community
aliases CVE-2023-26035
risk_score 1.0
exploitability 2.0
weighted_severity 0.5
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4qtk-7myx-vfcd
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apk/alpine/zoneminder@1.36.33-r0%3Farch=armv7&distroversion=v3.22&reponame=community