Lucene search
+L

2125 matches found

Redos
Redos
added 2025/09/23 12:00 a.m.6 views

ROS-20250923-17

Vulnerability in Zabbix universal monitoring system is related to incorrect authorization check in the hostprototype.get method in Zabbix API. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to confidential information. remotely to gain access to...

3.5CVSS6.5AI score0.0018EPSS
SaveExploits0
Redos
Redos
added 2025/09/23 12:00 a.m.9 views

ROS-20250923-16

Vulnerability in Zabbix universal monitoring system is related to incorrect authorization check in the hostprototype.get method in Zabbix API. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to confidential information. remotely to gain access to...

3.5CVSS6.5AI score0.0018EPSS
SaveExploits0
Redos
Redos
added 2025/09/23 12:00 a.m.6 views

ROS-20250923-19

A vulnerability in the Zabbix universal monitoring system is related to insufficient cleaning of user data transmitted via the "Visible Name" field during automatic host deletion. data transmitted via the "Visible Name" field during automatic host deletion. Exploitation vulnerability could allow ...

7.5CVSS7.7AI score0.01273EPSS
SaveExploits0
Redos
Redos
added 2025/09/23 12:00 a.m.9 views

ROS-20250923-23

Vulnerability in the Zabbix universal monitoring system is related to insufficient cleaning of user data transmitted via the "Visible name" field during automatic host deletion. data transmitted via the "Visible Name" field during automatic host deletion. Exploitation vulnerability could allow a...

7.5CVSS8AI score0.01273EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/09/21 10:21 a.m.15 views

CVE-2025-10630

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

4.3CVSS6.7AI score0.00346EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/19 12:30 p.m.19 views

GHSA-G4RR-88FC-26FJ Grafana-Zabbix ReDoS vulnerability

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

4.3CVSS6.8AI score0.00346EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
added 2025/09/19 12:30 p.m.33 views

Grafana-Zabbix ReDoS vulnerability

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

4.3CVSS6.8AI score0.00346EPSS
SaveExploits0References5Affected Software1
NVD
NVD
added 2025/09/19 10:15 a.m.12 views

CVE-2025-10630

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

4.3CVSS0.00346EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/09/19 9:44 a.m.4 views

CVE-2025-10630 Regex DoS in Grafana Zabbix Plugin

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

4.3CVSS6.3AI score0.00346EPSS
SaveExploits0References2
OSV
OSV
added 2025/09/19 9:44 a.m.8 views

CVE-2025-10630 Regex DoS in Grafana Zabbix Plugin

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

4.3CVSS7.2AI score
SaveExploits0References4
CVE
CVE
added 2025/09/19 9:44 a.m.791 views

CVE-2025-10630

Technical details about CVE-2025-10630 are not publicly available in the provided documents; monitor for updates.

4.3CVSS6.3AI score0.00346EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/09/19 9:44 a.m.18 views

CVE-2025-10630 Regex DoS in Grafana Zabbix Plugin

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

4.3CVSS0.00346EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/09/19 12:00 a.m.12 views

PT-2025-38521

Name of the Vulnerable Software and Affected Versions Grafana-Zabbix versions 5.2.1 and below Description Grafana-Zabbix is a plugin for Grafana that visualizes monitoring data from Zabbix. Versions 5.2.1 and below contain a Regular expression Denial of Service ReDoS vulnerability. This issue...

4.3CVSS7.7AI score0.00346EPSS
SaveExploits0
Grafana
Grafana
added 2025/09/19 12:00 a.m.14 views

Regex DoS in Zabbix Plugin in Grafana

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring. Versions 5.2.1 and below contained a ReDoS vulnerability via...

4.3CVSS8.5AI score0.00346EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/09/19 12:00 a.m.18 views

Zabbix plugin for Grafana 安全漏洞

Zabbix plugin for Grafana is an open source Zabbix plugin for Grafana dashboards from Grafana Labs. A security vulnerability exists in Zabbix plugin for Grafana version 5.2.1 and earlier, which stems from a user-supplied regular expression query that could result in a regular expression denial of...

4.3CVSS9AI score0.00346EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/09/14 11:22 a.m.17 views

CVE-2025-27233

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. This can be used to leak the NTLMv2 hash from a Windows system...

5.7CVSS6.6AI score0.0017EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/14 11:22 a.m.16 views

CVE-2025-27234

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution...

7.3CVSS7.5AI score0.00312EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/14 11:22 a.m.25 views

CVE-2025-27238

Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them...

2.1CVSS6.7AI score0.0018EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/09/14 11:22 a.m.15 views

CVE-2025-27240

A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field...

7.5CVSS7.4AI score0.01273EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/09/14 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-27238

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to a bug in Zabbix API, the hostprototype.get method lists all host prototypes to users that do not have any user groups assigned to them. CVE-2025-27238 No...

3.5CVSS5.9AI score0.0018EPSS
SaveExploits0References2
Rows per page
Query Builder