2176 matches found
openSUSE 15 Security Update : zabbix (openSUSE-SU-2023:0419-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0419-1 advisory. - An attacker who has the privilege to configure Zabbix items can use function icmpping with additional malicious command inside it to execute arbitrary...
Security update for zabbix (important)
openSUSE Security Update: Security update for zabbix Announcement ID: openSUSE-SU-2023:0419-1 Rating: important References: 1218199 Cross-References: CVE-2023-32727 CVSS scores: CVE-2023-32727 NVD : 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2023-32727 SUSE: 6.8...
Security update for zabbix (important)
openSUSE Security Update: Security update for zabbix Announcement ID: openSUSE-SU-2023:0418-1 Rating: important References: 1218199 Cross-References: CVE-2023-32727 CVSS scores: CVE-2023-32727 NVD : 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2023-32727 SUSE: 6.8...
OPENSUSE-SU-2023:0419-1 Security update for zabbix
This update for zabbix fixes the following issues: Updated to latest release 4.0.50: - CVE-2023-32727: Fixed potential arbitrary code execution in icmpping boo1218199...
OPENSUSE-SU-2023:0418-1 Security update for zabbix
This update for zabbix fixes the following issues: Updated to latest release 4.0.50: - CVE-2023-32727: Fixed potential arbitrary code execution in icmpping boo1218199...
The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to compromise data integrity.
The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the data...
The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...
The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...
The vulnerability of the Zabbix universal monitoring system, related to the lack of measures taken to protect the website structure, allows attackers to gain access to confidential data and compromise its integrity.
The vulnerability of the Zabbix universal monitoring system is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...
The vulnerability of the Zabbix universal monitoring system, related to logging beyond buffer boundaries, allows a intruder to trigger a service failure.
The vulnerability of the Zabbix universal monitoring system is related to logging beyond buffer boundaries. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures...
The vulnerability of the Zabbix universal monitoring system, related to the use of files and directories accessible to external parties, allows a intruder to gain access to confidential data.
The vulnerability of the Zabbix universal monitoring system lies in the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...
The components of the Zabbix monitoring system are vulnerable. This universal monitoring system allows attackers to access confidential data and compromise its integrity.
The vulnerability of various components of the Zabbix monitoring system’s universal architecture is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity...
The vulnerability of the universal monitoring system Zabbix, related to weak encryption, allows attackers to gain access to confidential data.
The vulnerability of the Zabbix universal monitoring system relates to the hashing of passwords using the MD5 algorithm. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...
The vulnerability of the zbx_session cookie file in the Zabbix monitoring system allows a hacker to increase their privileges.
The vulnerability of the zbxsession cookie file in the Zabbix monitoring system is related to incorrect processing of security prefixes in cookie file names. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
Exploit for Authorization Bypass Through User-Controlled Key in Zabbix
CVE-2019-17382 - Zabbix Authentication Bypass A critical vuln...
SUSE CVE-2023-32728
The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...
SUSE CVE-2023-32727
An attacker who has the privilege to configure Zabbix items can use function icmpping with additional malicious command inside it to execute arbitrary code on the current Zabbix server...
Vulnerabilities fixed in Zabbix
Vulnerabilities have been fixed in Zabbix. A malicious party can exploit the exploit the vulnerabilities to cause a Denial-of-Service, potentially execute arbitrary code with the privileges of the application, or use session hijacking to gain access to the data of a logged-in user. The developers...
