2176 matches found
CVE-2024-22122 AT(GSM) Command Injection
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem...
CVE-2024-22122
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem...
CVE-2024-22121 Zabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe
A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...
CVE-2024-22121 Zabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe
A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...
CVE-2024-22121
Technical details about CVE-2024-22121 are not publicly provided in the connected documents. Descriptions only state that a non-admin user can modify Zabbix Agent features. Monitor for updates from vendors and advisories.
CVE-2024-22121
A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...
PT-2024-10427 · Zabbix +3 · Zabbix +3
Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to incorrect permission storage in the Zabbix monitoring system. This allows an unauthorized user to access and view host count and other statistics through the System...
PT-2024-6098 · Zabbix +4 · Zabbix +4
Name of the Vulnerable Software and Affected Versions: Zabbix versions 5.0.0 through 7.0.0rc2 Description: The issue is related to the configuration of SMS notifications in Zabbix, where an AT command injection occurs due to the lack of validation of the Number field. This allows an attacker to...
PT-2024-6099 · Zabbix +4 · Zabbix +4
Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to the front-end audit log, which allows viewing of unprotected plaintext passwords. These passwords are displayed in plain text, potentially enabling a remote attacker ...
PT-2024-5538 · Zabbix +3 · Zabbix +3
Name of the Vulnerable Software and Affected Versions: Zabbix versions 6.4.0 through 6.4.15 Zabbix versions 7.0.0alpha1 through 7.0.0rc2 Description: The issue is related to the lack of default escaping for script parameters in the Monitoring Hosts section of Zabbix, allowing an administrator wit...
PT-2024-6100 · Zabbix +4 · Zabbix +4
Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to incorrect code generation control in the Zabbix monitoring system. It allows a remote attacker to execute arbitrary code. Setting SMS media allows configuring a GSM...
PT-2024-6089 · Zabbix +2 · Zabbix Agent +3
Name of the Vulnerable Software and Affected Versions: Zabbix Agent versions prior to 7.0.0rc2 Description: The issue is related to improper permission storage in the Zabbix Agent application. This can allow an attacker to elevate their privileges. A non-admin user can change or remove important...
PT-2024-6101 · Zabbix +4 · Zabbix +4
Name of the Vulnerable Software and Affected Versions: Zabbix versions 6.0.30 through 6.0.30, 6.4.15, and 7.0.0 Description: The issue is related to the ability to directly modify memory pointers in the JavaScript engine within Zabbix. This could allow a remote attacker to execute arbitrary code...
PT-2024-6090 · Zabbix +2 · Zabbix +2
Name of the Vulnerable Software and Affected Versions: Zabbix versions prior to 7.0.0rc2 Description: The issue is related to uncontrolled resource consumption, where an attacker or system uses excessive resources, such as CPU, memory, or network bandwidth, without proper limitations or controls...
The vulnerability of the zabbix-agent2 package for the Alpine Linux operating system allows a hacker to elevate their privileges to the root level.
The vulnerability of the zabbix-agent2 package for the Alpine Linux operating system relates to the absence of resource initialization. Exploiting this vulnerability allows a malicious actor to gain privileges to the root level remotely...
PT-2024-41367 · Zabbix Llc. · Zabbix
Уязвимость компонента Zabbix Agent системы мониторинга ИТ-инфраструктуры Zabbix связана с чтением памяти за границами буфера. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании...
OPENSUSE-SU-2024:12212-1 zabbix-agent-4.0.42-1.1 on GA media
These are all security issues fixed in the zabbix-agent-4.0.42-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11539-1 zabbix-agent-4.0.32-1.4 on GA media
These are all security issues fixed in the zabbix-agent-4.0.32-1.4 package on the GA media of openSUSE Tumbleweed...