zabbix vulnerabilities (Debian)
129 vulnerabilities.
-
zabbixDebian SNMP trap injection in zabbix_trap_receiver.pl 5.3 Medium -
zabbixDebian Active agent heartbeat missing TLS check 6.9 Medium -
zabbixDebian Hidden host credentials inferable via multiselect.get filtering 5.1 Medium -
zabbixDebian Server DoS via binary items 2.3 Low -
zabbixDebian JavaScript preprocessing memory disclosure 6.9 Medium -
zabbixDebian Server DoS via JavaScript preprocessing or script items 2.1 Low -
zabbixDebian Host PSK extraction in Zabbix API 6.0 Medium -
zabbixDebian Use-after-free read in script item/preprocessing HttpRequest body 6.8 Medium -
zabbixDebian Frontend DoS via the popup.testtriggerexpr action 5.3 Medium -
zabbixDebian Prototype pollution leading to stored XSS 8.5 High -
zabbixDebian API and Frontend login lockout race condition 6.9 Medium -
zabbixDebian Stored XSS vulnerability in the Item history/Plain text widget 7.3 High -
zabbixDebian Agent 2 Oracle plugin TNS connection string injection via the 'service' parameter 5.1 Medium -
zabbixDebian Stored XSS vulnerability in Host navigator widget maintenance tooltip 7.3 High -
zabbixDebian Agent 2 Docker plugin arbitrary file read via Docker API injection 6.1 Medium -
zabbixDebian Blind, read-only SQL injection in Zabbix API via sortfield parameter 8.7 High -
zabbixDebian Host and event action script regex validation can be bypassed in certain situations, leading to potential command injection 7.7 High -
zabbixDebian Insufficient isolation of JavaScript (Duktape) execution context on Zabbix Server 7.1 High -
zabbixDebian Unauthorized host creation via configuration.import API by low-privilege user with write permissions 5.1 Medium -
zabbixDebian Frontend DoS vulnerability due to asymmetric resource consumption 6.0 Medium -
zabbixDebian Insufficient permission check for the problem.view.refresh action 5.1 Medium -
zabbixDebian User information disclosure via api_jsonrpc.php on method user.get with param search 2.1 Low -
zabbixDebian LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin 4.3 Medium -
zabbixDebian Secondary-order SQL injection in Zabbix Server when deleting an autoregistered host 7.5 High -
zabbixDebian API hostprototype.get lists data to users with insufficient authorization. 2.1 Low -
zabbixDebian Zabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later. 5.7 Medium -
zabbixDebian Zabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0. 7.3 High -
zabbixDebian DoS vulnerability due to uncontrolled resource exhaustion 6.0 Medium -
zabbixDebian Reflected XSS vulnerability in /zabbix.php?action=export.valuemaps 7.5 High -
zabbixDebian Excessive information returned by user.get 2.1 Low -
zabbixDebian User enumeration via timing attack in Zabbix web interface 2.3 Low -
zabbixDebian SQL injection in Zabbix API 8.6 High -
zabbixDebian Unauthenticated Zabbix frontend takeover when SSO is being used 8.8 High -
zabbixDebian Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported 2.7 Low -
zabbixDebian Heap buffer over-read 2.7 Low -
zabbixDebian New line injection in Zabbix SNMP traps 3.7 Low -
zabbixDebian Use after free in browser_push_error 3.3 Low -
zabbixDebian JS - Internal strings in HTTP headers 9.1 Critical -
zabbixDebian JS - Crash on unexpected HTTP server response 3.3 Low -
zabbixDebian JS - Crash on empty HTTP server response 3.3 Low -
zabbixDebian SQL injection in user.get API 9.9 Critical -
zabbixDebian Use after free vulnerability in browser.c 4.4 Medium -
zabbixDebian Stack buffer overflow in zbx_snmp_cache_handle_engineid 3.0 Low -
zabbixDebian Authentication privilege escalation via user groups due to missing authorization checks 7.5 High -
zabbixDebian The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and... 6.5 Medium -
zabbixDebian Value of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added 2.2 Low -
zabbixDebian Zabbix Arbitrary File Read 2.7 Low -
zabbixDebian Remote code execution within ping script 9.9 Critical -
zabbixDebian System Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission 4.3 Medium -
zabbixDebian Allocation of resources without limits or throttling (uncontrolled resource consumption) 7.5 High - Show olderLoading…