zabbix vulnerabilities (Debian)
129 vulnerabilities.
zabbixDebianDirect access to memory pointers within the JS engine for modification9.1 CriticalzabbixDebianFront-end audit log shows passwords in plaintext8.1 HighzabbixDebianAT(GSM) Command Injection3.0 LowzabbixDebianTime Based SQL Injection in Zabbix Server Audit Log9.1 CriticalzabbixDebianStored XSS in graph items select form5.5 MediumzabbixDebianCode injection in zabbix_agent2 smart.disk.get caused by smartctl plugin4.6 MediumzabbixDebianCode execution vulnerability in icmpping6.8 MediumzabbixDebianPossible buffer overread from reading DNS responses3.9 LowzabbixDebianLeak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.9.6 CriticalzabbixDebianzabbix - regression updateNo scorezabbixDebianJavaScript engine memory pointers are directly available for Zabbix users for modification9.1 CriticalzabbixDebianInefficient permission check in class CControllerAuthenticationUpdate8.5 HighzabbixDebianStack-buffer Overflow in library module zbxjson9.6 CriticalzabbixDebianStored XSS in Maps element7.6 HighzabbixDebianAgent 2 package are built with Go version affected by CVE-2023-245389.8 CriticalzabbixDebianInsufficient validation of Action form input fields6.3 MediumzabbixDebianDuktape 2.6 bug crashes JavaScript putting too many values in valstack.5.9 MediumzabbixDebianInefficient URL schema validation5.7 MediumzabbixDebianReflected XSS in several fields of graph form5.4 MediumzabbixDebianPersistent XSS in the user form5.4 MediumzabbixDebianRemove possibility to add html into Geomap attribution field5.5 MediumzabbixDebianDenial of service caused by a bug in the JSON parser4.7 MediumzabbixDebianUnauthorized limited filesystem access from preprocessing8.5 HighzabbixDebianLimited control of resource utilization in JS preprocessing5.9 MediumzabbixDebianFile name information disclosure vulnerability in Zabbix Web Service Report Generation5.9 MediumzabbixDebianX-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode5.3 MediumzabbixDebianReflected XSS in the backurl parameter of Zabbix Frontend4.8 MediumzabbixDebianReflected XSS in graphs page of Zabbix Frontend3.7 LowzabbixDebianReflected XSS in discovery page of Zabbix Frontend3.7 LowzabbixDebianReflected XSS in graph configuration window of Zabbix Frontend3.7 LowzabbixDebianReflected XSS in item configuration window of Zabbix Frontend3.7 LowzabbixDebianReflected XSS in service configuration window of Zabbix Frontend3.7 LowzabbixDebianReflected XSS in action configuration window of Zabbix Frontend4.6 MediumzabbixDebianPossible view of the setup pages by unauthenticated users if config file already exists3.7 LowzabbixDebianStored XSS in host groups configuration window in Zabbix Frontend6.3 MediumzabbixDebianIncorrect permissions of [/var/run/zabbix] forces dac_override3.3 LowzabbixDebianIn Zabbix before 4.0.28rc1, 5.x before 5.0.8rc1, 5.1.x and 5.2.x before 5.2.4rc1, and 5.3.x and 5...8.8 HighzabbixDebianZabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary...9.0 CriticalzabbixDebianZabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x...6.1 MediumzabbixDebianA File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request...9.8 CriticalzabbixDebianZabbix before 5.0 represents passwords in the users table with unsalted MD5.7.5 HighzabbixDebianAn issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4....9.1 CriticalzabbixDebianZabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to...5.3 MediumzabbixDebianZabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3...6.1 MediumzabbixDebianAn information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4...3.7 LowzabbixDebianIn the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can...7.0 HighzabbixDebianAn exploitable code execution vulnerability exists in the trapper command functionality of Zabbix...8.1 HighzabbixDebianSQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers...9.8 CriticalzabbixDebianThe mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix...8.1 HighzabbixDebianMultiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22,...7.5 High- Show moreLoading…