Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/zoneminder@1.34.21-1?distro=trixie
purl pkg:deb/debian/zoneminder@1.34.21-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-r3pj-815v-uubu Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php. CVE-2020-25730
VCID-yxpy-5fmj-cbb7 ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php. CVE-2020-25729

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:27:58.079497+00:00 Debian Importer Fixing VCID-r3pj-815v-uubu https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:31:32.203757+00:00 Debian Importer Fixing VCID-yxpy-5fmj-cbb7 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:03:42.258541+00:00 Debian Importer Fixing VCID-r3pj-815v-uubu https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-11T18:21:05.397241+00:00 Debian Importer Fixing VCID-yxpy-5fmj-cbb7 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:59:19.239384+00:00 Debian Importer Fixing VCID-r3pj-815v-uubu https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:59:19.198158+00:00 Debian Importer Fixing VCID-yxpy-5fmj-cbb7 https://security-tracker.debian.org/tracker/data/json 38.1.0