ROS-20250616-28

The vulnerability of the Zabbix universal monitoring system server is related to unrestricted allocation of resources. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of denial of service...

ROS-20250616-21

A vulnerability in the Zabbix Universal Monitoring System server is related to excessive data output by an by the application. Exploitation of the vulnerability could allow a remote attacker to gain access to potentially sensitive information. to potentially sensitive information. A vulnerability...

ROS-20250616-22

A vulnerability in the Zabbix Universal Monitoring System server is related to excessive data output by an by the application. Exploitation of the vulnerability could allow a remote attacker to gain access to potentially sensitive information. to potentially sensitive information. A vulnerability...

TencentOS Server 4: zabbix (TSSA-2024:1129)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:1129 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

Zabbix Proxy Installed (Linux)

Binary data zabbixproxynixinstalled.nbin...

Zabbix Server Installed (Linux)

Binary data zabbixservernixinstalled.nbin...

Fedora: Security Advisory (FEDORA-2025-a7a06a72c8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2025-700a59e277)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-22704

The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation to root because the design incorrectly expected that systemd would in effect determine part of the configuration...

CVE-2013-3628

Zabbix 2.0.9 has an Arbitrary Command Execution Vulnerability...

CVE-2018-18289

The MESILAT Zabbix plugin before 1.1.15 for Atlassian Confluence allows attackers to read arbitrary files...

The vulnerability of the Zabbix Agent component of the Zabbix IT infrastructure monitoring system allows a attacker to cause a service failure.

The vulnerability of the Zabbix Agent component in the IT infrastructure monitoring system relates to reading memory beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability in the Zabbix UI of the IT infrastructure monitoring system allows a perpetrator to increase their privileges within the system and execute arbitrary code.

The vulnerability in the Zabbix UI of the IT infrastructure monitoring system is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to enhance their privileges within the system and execute arbitrary code...

The vulnerability of Zabbix’s Web interface, the UI of the IT infrastructure monitoring system, allows a perpetrator to trigger a service failure or compromise the integrity of Zabbix’s Web interface resources.

The vulnerability of Zabbix’s Web interface, the monitoring system for IT infrastructure, is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability allows a malicious actor to cause service failures or compromise the integrity of Zabbix’s Web...

The vulnerability in the Zabbix UI of the IT infrastructure monitoring system allows a attacker to disclose protected information.

A vulnerability exists in the Zabbix UI of the IT infrastructure monitoring system, related to insecure configuration settings. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information...

The vulnerability of the API component of the Zabbix monitoring system allows a attacker to execute arbitrary commands.

The vulnerability of the API component of the Zabbix monitoring system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary commands by processing the groupBy parameter...

The vulnerability of the Zabbix universal monitoring system’s web interface allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Zabbix universal monitoring system’s web interface is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack by manipulating the backurl parameter...

The vulnerability of the API component of the Zabbix monitoring system allows a hacker to disclose protected information.

The vulnerability of the API component of the Zabbix monitoring system is related to incorrect authentication. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information that should be protected...

The vulnerability of the server of the Zabbix universal monitoring system allows a intruder to trigger a service failure.

The vulnerability of the Zabbix universal monitoring system is related to the unlimited distribution of resources. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

ROS-20250505-04

The vulnerability of the Zabbix universal monitoring system is related to insufficient cleansing of user data passed via the "groupBy" parameter in include/classes/api/CApiService.php. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary SQL queries in the database...