PT-2024-6101 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix versions 6.0.30 through 6.0.30, 6.4.15, and 7.0.0 Description: The issue is related to the ability to directly modify memory pointers in the JavaScript engine within Zabbix. This could allow a remote attacker to execute arbitrary code...

PT-2024-6089 · Zabbix +2 · Zabbix Agent +3

Name of the Vulnerable Software and Affected Versions: Zabbix Agent versions prior to 7.0.0rc2 Description: The issue is related to improper permission storage in the Zabbix Agent application. This can allow an attacker to elevate their privileges. A non-admin user can change or remove important...

PT-2024-6090 · Zabbix +2 · Zabbix +2

Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 7.0.0rc2 Description: The issue is related to uncontrolled resource consumption, where an attacker or system uses excessive resources, such as CPU, memory, or network bandwidth, without proper limitations or controls...

The vulnerability of the zabbix-agent2 package for the Alpine Linux operating system allows a hacker to elevate their privileges to the root level.

The vulnerability of the zabbix-agent2 package for the Alpine Linux operating system relates to the absence of resource initialization. Exploiting this vulnerability allows a malicious actor to gain privileges to the root level remotely...

PT-2024-41367 · Zabbix Llc. · Zabbix

Уязвимость компонента Zabbix Agent системы мониторинга ИТ-инфраструктуры Zabbix связана с чтением памяти за границами буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...

OPENSUSE-SU-2024:11539-1 zabbix-agent-4.0.32-1.4 on GA media

These are all security issues fixed in the zabbix-agent-4.0.32-1.4 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:12212-1 zabbix-agent-4.0.42-1.1 on GA media

These are all security issues fixed in the zabbix-agent-4.0.42-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11772-1 zabbix-agent-4.0.37-1.1 on GA media

These are all security issues fixed in the zabbix-agent-4.0.37-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13068-1 zabbix-agent-6.0.19-1.1 on GA media

These are all security issues fixed in the zabbix-agent-6.0.19-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11934-1 zabbix-agent-4.0.39-1.1 on GA media

These are all security issues fixed in the zabbix-agent-4.0.39-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13535-1 zabbix-agent-6.0.25-1.1 on GA media

These are all security issues fixed in the zabbix-agent-6.0.25-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:13341-1 zabbix-agent-6.0.22-1.1 on GA media

These are all security issues fixed in the zabbix-agent-6.0.22-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20240611-05

The vulnerability of the Zabbix Workstation universal monitoring system server is related to errors in input data processing. of input data. Exploitation of the vulnerability could allow a remote attacker to execute an arbitrary code by injecting a specially crafted SQL query. arbitrary code by...

SUSE CVE-2022-24349

An authenticated user can create a link with reflected XSS payload for actions' pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attac...

The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

PT-2024-9177 · Zabbix +5 · Zabbix +5

Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 7.0.2 Description: The issue is related to the implementation of atob in "Zabbix JS", which allows creating a string with arbitrary content to access internal properties of objects. This can potentially lead to data...

PT-2024-9179 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: A bug in the code allows an attacker to sign a forged zbx session cookie, which then allows them to sign in with admin permissions. This issue is related to the authentication mechanism,...

Exploit for CVE-2024-22120

CVE-2024-22120 ToolKit Affected Version/s 6.0.0 - 6.0...

The vulnerability of the Zabbix Workstation universal monitoring system, related to errors in processing input data, allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix Workstation universal monitoring system is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by introducing a specially crafted SQL query remotely...

DEBIAN-CVE-2024-22120

Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection...