Lucene search
K

15 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.23 views

Astra Linux - уязвимость в zabbix

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...

9.8CVSS9.7AI score0.00536EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-36955

Malicious code in bioql PyPI...

9.8CVSS7.1AI score0.00536EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/09/14 11:22 a.m.8 views

CVE-2025-27233

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. This can be used to leak the NTLMv2 hash from a Windows system...

5.7CVSS6.6AI score0.00039EPSS
Exploits0References1
OSV
OSV
added 2025/09/12 11:15 a.m.1 views

DEBIAN-CVE-2025-27234

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution...

7.3CVSS5.8AI score0.00164EPSS
Exploits0References1
OSV
OSV
added 2025/09/12 11:15 a.m.0 views

UBUNTU-CVE-2025-27233

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. This can be used to leak the NTLMv2 hash from a Windows system...

5.7CVSS5.8AI score0.00039EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/09/12 10:31 a.m.2 views

CVE-2025-27234 Zabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0.

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution...

7.3CVSS7.7AI score0.00164EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/09/12 10:31 a.m.5 views

CVE-2025-27234 Zabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0.

Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, allowing an attacker to inject unexpected arguments into the smartctl command. In Zabbix 5.0 this allows for remote code execution...

7.3CVSS0.00164EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2023-32728

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote...

9.8CVSS6.8AI score0.00536EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:0 a.m.2 views

PT-2025-37303

Name of the Vulnerable Software and Affected Versions: Zabbix Agent 2 affected versions not specified Description: The Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, which allows an attacker to inject unexpected arguments into the smartctl command. This can b...

7.5CVSS6.1AI score0.00093EPSS
Exploits0References22
OSV
OSV
added 2023/12/18 10:15 a.m.5 views

CVE-2023-32728

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...

9.8CVSS7.7AI score
Exploits0References1
UbuntuCve
UbuntuCve
added 2023/12/18 10:15 a.m.54 views

CVE-2023-32728

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...

9.8CVSS6.8AI score0.00536EPSS
Exploits0References2
Prion
Prion
added 2023/12/18 10:15 a.m.14 views

Remote code execution

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...

7.5CVSS8.1AI score0.00536EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/18 9:19 a.m.13 views

CVE-2023-32728 Code injection in zabbix_agent2 smart.disk.get caused by smartctl plugin

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...

4.6CVSS7.8AI score0.00536EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2023/12/18 9:19 a.m.27 views

CVE-2023-32728

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...

9.8CVSS8.2AI score0.00536EPSS
Exploits0
Cvelist
Cvelist
added 2023/12/18 9:19 a.m.16 views

CVE-2023-32728 Code injection in zabbix_agent2 smart.disk.get caused by smartctl plugin

The Zabbix Agent 2 item key smart.disk.get does not sanitize its parameters before passing them to a shell command resulting possible vulnerability for remote code execution...

4.6CVSS10AI score0.00536EPSS
Exploits0References1
Rows per page
Query Builder