2 matches found
CVE-2025-27240: Improper Neutralization of Special Elements used in an SQL Command
A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field...
7.5CVSS5.9AI score0.01263EPSS
SaveExploits0References1
Zabbix Sia Zabbix has an unspecified vulnerability (CNVD-2022-11529)
Zabbix Sia Zabbix is an open source monitoring system from the Latvian company Zabbix SIA Zabbix Sia. Zabbix 4.0 LTS, 4.2, 4.4 and 5.0 LTS versions are vulnerable due to a lack of filtering and escaping of user submitted command parameters. Any user with the "Zabbix Administrator" role can run a...
7.2CVSS2.6AI score0.03927EPSS
SaveExploits1References1
20