Lucene search
+L

2176 matches found

CNNVD
CNNVD
added 2023/12/18 12:00 a.m.24 views

Zabbix Security Vulnerabilities

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring, and application monitoring. A security vulnerability exists in Zabbix Server, which stems from a vulnerability that allows an attacker to execute arbitrary code on...

7.2CVSS7.7AI score0.00873EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/18 12:00 a.m.8 views

PT-2023-8850 · Zabbix +4 · Zabbix Agent 2 +5

Name of the Vulnerable Software and Affected Versions: Zabbix Agent 2 affected versions not specified Description: The issue is related to the Zabbix Agent 2 item key smart.disk.get not sanitizing its parameters before passing them to a shell command, which could lead to remote code execution. Th...

10CVSS7.6AI score0.00873EPSS
SaveExploits1References39
Positive Technologies
Positive Technologies
added 2023/12/18 12:00 a.m.5 views

PT-2023-8056 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is related to errors in processing input data in the icmpping function of the Zabbix monitoring system. This can allow a remote attacker to execute arbitrary code. An attacker with...

9.9CVSS6.8AI score0.01606EPSS
SaveExploits3References101
CNNVD
CNNVD
added 2023/12/18 12:00 a.m.12 views

Zabbix Security Vulnerabilities

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A security vulnerability exists in Zabbix Agent, which stems from the presence of a buffer overflow vulnerability. Affected products and...

8.1CVSS7.1AI score0.00673EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/18 12:00 a.m.11 views

PT-2023-7982 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix versions affected versions not specified Description: The issue is related to the incorrect handling of security prefixes in cookie names, specifically the zbx session cookie, which can allow a remote attacker to elevate their...

10CVSS6.5AI score0.00873EPSS
SaveExploits1References29
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.11 views

The vulnerability of the agent of the Zabbix monitoring system allows a intruder to execute arbitrary code.

The vulnerability of the Zabbix universal monitoring agent is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.0075EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.9 views

The vulnerability of the zabbix/src/libs/zbxjson module in the universal monitoring system Zabbix allows a intruder to execute arbitrary code.

The vulnerability of the zabbix/src/libs/zbxjson module in the universal monitoring system Zabbix is related to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8.1AI score0.0069EPSS
SaveExploits0References7Affected Software4
Positive Technologies
Positive Technologies
added 2023/11/22 12:00 a.m.6 views

PT-2023-9162 · Zabbix +4 · Zabbix +4

Name of the Vulnerable Software and Affected Versions: Zabbix affected versions not specified Description: The issue is caused by improper validation of the form input field Name on the Graph page in the Items section. This can lead to a cross-site scripting XSS attack, allowing a remote attacker...

9.9CVSS6AI score0.01606EPSS
SaveExploits3References106
Debian
Debian
added 2023/10/21 10:41 a.m.13 views

[SECURITY] [DLA 3538-2] zabbix regression update

Debian LTS Advisory DLA-3538-2 [email protected] https://www.debian.org/lts/security/ Tobias Frost October 21, 2023 https://wiki.debian.org/LTS Package : zabbix Version : 1:4.0.4+dfsg-1+deb10u3 CVE ID : Debian Bug : 1051300 The last update required an update to the database scheme, but ...

5.8AI score
SaveExploits0
OSV
OSV
added 2023/10/21 12:00 a.m.9 views

DLA-3538-2 zabbix - regression update

Bulletin has no description...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/10/17 12:00 a.m.13 views

The vulnerability of the Universal Monitoring System Interface of Zabbix, which allows attackers to perform cross-site scripting attacks

The vulnerability of the Zabbix monitoring system’s universal interface is related to insufficient validation of input data during the processing of the URL fields in the Maps elements. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

7.6CVSS6.3AI score0.00595EPSS
SaveExploits0References9Affected Software5
SUSE CVE
SUSE CVE
added 2023/10/14 1:13 a.m.6 views

SUSE CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

7.6CVSS6.2AI score0.00595EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/10/14 1:13 a.m.4 views

SUSE CVE-2023-32722

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbxjsonopen...

9.6CVSS7.5AI score0.0069EPSS
SaveExploits0References3
AlpineLinux
AlpineLinux
added 2023/10/12 7:15 a.m.87 views

CVE-2023-32722

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbxjsonopen...

9.6CVSS7.4AI score0.0069EPSS
SaveExploits0
OSV
OSV
added 2023/10/12 7:15 a.m.26 views

CVE-2023-32722

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbxjsonopen...

7.8CVSS7.6AI score
SaveExploits0References2
OSV
OSV
added 2023/10/12 7:15 a.m.2 views

DEBIAN-CVE-2023-32722

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbxjsonopen...

7.8CVSS8.2AI score0.0069EPSS
SaveExploits0References1
NVD
NVD
added 2023/10/12 7:15 a.m.21 views

CVE-2023-32722

The zabbix/src/libs/zbxjson module is vulnerable to a buffer overflow when parsing JSON files via zbxjsonopen...

9.6CVSS9.6AI score0.0069EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2023/10/12 7:15 a.m.135 views

CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

7.6CVSS5.7AI score0.00595EPSS
SaveExploits0
NVD
NVD
added 2023/10/12 7:15 a.m.24 views

CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

7.6CVSS7.4AI score0.00595EPSS
SaveExploits0References3
OSV
OSV
added 2023/10/12 7:15 a.m.2 views

DEBIAN-CVE-2023-32721

A stored XSS has been found in the Zabbix web application in the Maps element if a URL field is set with spaces before URL...

5.4CVSS6AI score0.00595EPSS
SaveExploits0References1
Rows per page
Query Builder