Zabbix 5.0.0 - Stored XSS via URL Widget Iframe

Exploit Title: Zabbix 5.0.0 - Stored XSS via URL Widget Iframe Date: 8/11/2020 Exploit Author: Shwetabh Vishnoi Vendor Homepage: https://www.zabbix.com/ Software Link: https://www.zabbix.com/download Affected Version: Zabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before...

Debian DLA-2461-1 : zabbix security update

Multiple vulnerabilities were discovered in Zabbix, a network monitoring solution. An attacker may remotely execute code on the zabbix server, and redirect to external links through the zabbix web frontend. CVE-2016-10742 Zabbix allows open redirect via the request parameter. CVE-2020-11800 Zabbi...

Debian: Security Advisory (DLA-2461-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 2461-1] zabbix security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2461-1 [email protected] https://www.debian.org/lts/security/ November 21, 2020 https://wiki.debian.org/LTS - -------------------------------------------------------------------------...

DLA-2461-1 zabbix - security update

Bulletin has no description...

The vulnerability of the universal monitoring system Zabbix, related to errors in code generation, allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix universal monitoring system is related to errors in code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

DEBIAN-CVE-2020-11800

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

CVE-2020-11800

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

CVE-2020-11800

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

CVE-2020-11800

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

CVE-2020-11800

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

UBUNTU-CVE-2020-11800

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

Code injection

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

CVE-2020-11800

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

CVE-2020-11800

Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary code...

CVE-2020-11800

CVE-2020-11800 affects Zabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2, enabling remote code execution. The description indicates the issue is a remote code execution vulnerability, but the provided documents do not include a concrete root-cause analysis or a confirmed patch/version that fix...

openSUSE Security Update : zabbix (openSUSE-2020-1604)

This update for zabbix fixes the following issues : Updated to version 3.0.31. + CVE-2020-15803: Fixed an XSS in the URL Widget boo1174253. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-1604. The...

openSUSE: Security Advisory for zabbix (openSUSE-SU-2020:1604-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

OPENSUSE-SU-2020:1604-1 Security update for zabbix

This update for zabbix fixes the following issues: Updated to version 3.0.31. + CVE-2020-15803: Fixed an XSS in the URL Widget boo1174253...

Security update for zabbix (moderate)

openSUSE Security Update: Security update for zabbix Announcement ID: openSUSE-SU-2020:1604-1 Rating: moderate References: 1174253 Cross-References: CVE-2020-11800 CVE-2020-15803 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 openSUSE Backports SLE-15-SP2 openSUSE Backports SLE-15-SP1 A...