Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-tyu6-8h17-8yh5
SummaryZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an SQL Injection. The minTime and maxTime request parameters are not properly validated and could be used execute arbitrary SQL. This issue is fixed in versions 1.36.33 and 1.37.33.
Aliases
0
alias CVE-2023-26037
Fixed_packages
0
url pkg:deb/debian/zoneminder@1.36.33%2Bdfsg1-1
purl pkg:deb/debian/zoneminder@1.36.33%2Bdfsg1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xuk-942c-kkbf
1
vulnerability VCID-4mfm-zzrx-6ffb
2
vulnerability VCID-7x51-uyq2-9qax
3
vulnerability VCID-mdkd-vmcp-afa8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/zoneminder@1.36.33%252Bdfsg1-1
1
url pkg:deb/debian/zoneminder@1.36.33%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/zoneminder@1.36.33%2Bdfsg1-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xuk-942c-kkbf
1
vulnerability VCID-4mfm-zzrx-6ffb
2
vulnerability VCID-7x51-uyq2-9qax
3
vulnerability VCID-mdkd-vmcp-afa8
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/zoneminder@1.36.33%252Bdfsg1-1%3Fdistro=trixie
2
url pkg:deb/debian/zoneminder@1.36.35%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/zoneminder@1.36.35%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/zoneminder@1.36.35%252Bdfsg1-1%3Fdistro=trixie
3
url pkg:deb/debian/zoneminder@1.36.37%2Bdfsg1-1?distro=trixie
purl pkg:deb/debian/zoneminder@1.36.37%2Bdfsg1-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/zoneminder@1.36.37%252Bdfsg1-1%3Fdistro=trixie
Affected_packages
0
url pkg:deb/debian/zoneminder@1.34.23-1?distro=trixie
purl pkg:deb/debian/zoneminder@1.34.23-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xuk-942c-kkbf
1
vulnerability VCID-4mfm-zzrx-6ffb
2
vulnerability VCID-4qtk-7myx-vfcd
3
vulnerability VCID-7vc9-wfjb-t3ba
4
vulnerability VCID-7x51-uyq2-9qax
5
vulnerability VCID-95ub-6q5w-p3cm
6
vulnerability VCID-9kh5-715y-pud4
7
vulnerability VCID-d117-rhnc-rkhf
8
vulnerability VCID-fyy1-fwys-xkbj
9
vulnerability VCID-j283-1m9p-13hn
10
vulnerability VCID-jukn-h868-5ugm
11
vulnerability VCID-kk5d-y2z8-r3g2
12
vulnerability VCID-mdkd-vmcp-afa8
13
vulnerability VCID-mk5h-586t-pyga
14
vulnerability VCID-n8y3-5fb9-kucb
15
vulnerability VCID-tyu6-8h17-8yh5
16
vulnerability VCID-uybk-r4q9-gyac
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/zoneminder@1.34.23-1%3Fdistro=trixie
1
url pkg:deb/debian/zoneminder@1.34.23-1
purl pkg:deb/debian/zoneminder@1.34.23-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3xuk-942c-kkbf
1
vulnerability VCID-4mfm-zzrx-6ffb
2
vulnerability VCID-4qtk-7myx-vfcd
3
vulnerability VCID-7vc9-wfjb-t3ba
4
vulnerability VCID-7x51-uyq2-9qax
5
vulnerability VCID-95ub-6q5w-p3cm
6
vulnerability VCID-9kh5-715y-pud4
7
vulnerability VCID-d117-rhnc-rkhf
8
vulnerability VCID-fyy1-fwys-xkbj
9
vulnerability VCID-j283-1m9p-13hn
10
vulnerability VCID-jukn-h868-5ugm
11
vulnerability VCID-kk5d-y2z8-r3g2
12
vulnerability VCID-mdkd-vmcp-afa8
13
vulnerability VCID-mk5h-586t-pyga
14
vulnerability VCID-n8y3-5fb9-kucb
15
vulnerability VCID-tyu6-8h17-8yh5
16
vulnerability VCID-uybk-r4q9-gyac
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/zoneminder@1.34.23-1
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-26037
reference_id
reference_type
scores
0
value 0.00714
scoring_system epss
scoring_elements 0.72367
published_at 2026-04-21T12:55:00Z
1
value 0.00714
scoring_system epss
scoring_elements 0.72379
published_at 2026-04-18T12:55:00Z
2
value 0.00714
scoring_system epss
scoring_elements 0.72287
published_at 2026-04-02T12:55:00Z
3
value 0.00714
scoring_system epss
scoring_elements 0.72306
published_at 2026-04-04T12:55:00Z
4
value 0.00714
scoring_system epss
scoring_elements 0.72283
published_at 2026-04-07T12:55:00Z
5
value 0.00714
scoring_system epss
scoring_elements 0.72322
published_at 2026-04-08T12:55:00Z
6
value 0.00714
scoring_system epss
scoring_elements 0.72334
published_at 2026-04-09T12:55:00Z
7
value 0.00714
scoring_system epss
scoring_elements 0.72357
published_at 2026-04-11T12:55:00Z
8
value 0.00714
scoring_system epss
scoring_elements 0.7234
published_at 2026-04-12T12:55:00Z
9
value 0.00714
scoring_system epss
scoring_elements 0.72328
published_at 2026-04-13T12:55:00Z
10
value 0.00714
scoring_system epss
scoring_elements 0.7237
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-26037
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26037
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26037
2
reference_url https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-65jp-2hj3-3733
reference_id GHSA-65jp-2hj3-3733
reference_type
scores
0
value 8.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-10T20:57:34Z/
url https://github.com/ZoneMinder/zoneminder/security/advisories/GHSA-65jp-2hj3-3733
Weaknesses
0
cwe_id 89
name Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
description The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.
Exploits
Severity_range_score8.9 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-tyu6-8h17-8yh5