zabbix vulnerabilities (Ubuntu)
100 vulnerabilities.
-
zabbixUbuntu Stored XSS vulnerability in OAuth configuration form 5.6 Medium -
zabbixUbuntu SNMP trap injection in zabbix_trap_receiver.pl 5.3 Medium -
zabbixUbuntu Active agent heartbeat missing TLS check 6.9 Medium -
zabbixUbuntu Hidden host credentials inferable via multiselect.get filtering 5.1 Medium -
zabbixUbuntu Server DoS via binary items 2.3 Low -
zabbixUbuntu JavaScript preprocessing memory disclosure 6.9 Medium -
zabbixUbuntu Improper validation of custom installation directories on Windows could allow installation into locations with unsafe permissions, increasing the risk of DLL sideloading. 5.4 Medium -
zabbixUbuntu Server DoS via JavaScript preprocessing or script items 2.1 Low -
zabbixUbuntu Host PSK extraction in Zabbix API 6.0 Medium -
zabbixUbuntu Use-after-free read in script item/preprocessing HttpRequest body 6.8 Medium -
zabbixUbuntu Frontend DoS via the validate.api.exists action 5.1 Medium -
zabbixUbuntu Hardcoded session key in Zabbix 7.4 7.7 High -
zabbixUbuntu Frontend plaintext macro value enumeration via the validatate.api.exists action 5.3 Medium -
zabbixUbuntu Frontend DoS via the popup.testtriggerexpr action 5.3 Medium -
zabbixUbuntu Prototype pollution leading to stored XSS 8.5 High -
zabbixUbuntu API and Frontend login lockout race condition 6.9 Medium -
zabbixUbuntu Email media OAuth secret leak to Super Admin 2.1 Low -
zabbixUbuntu Stored XSS vulnerability in the Item history/Plain text widget 7.3 High -
zabbixUbuntu Agent 2 Oracle plugin TNS connection string injection via the 'service' parameter 5.1 Medium -
zabbixUbuntu Stored XSS vulnerability in Host navigator widget maintenance tooltip 7.3 High -
zabbixUbuntu Agent 2 Docker plugin arbitrary file read via Docker API injection 6.1 Medium -
zabbixUbuntu Blind, read-only SQL injection in Zabbix API via sortfield parameter 8.7 High -
zabbixUbuntu Host and event action script regex validation can be bypassed in certain situations, leading to potential command injection 7.7 High -
zabbixUbuntu Insufficient isolation of JavaScript (Duktape) execution context on Zabbix Server 7.1 High -
zabbixUbuntu Unauthorized host creation via configuration.import API by low-privilege user with write permissions 5.1 Medium -
zabbixUbuntu Frontend DoS vulnerability due to asymmetric resource consumption 6.0 Medium -
zabbixUbuntu Frontend arbitrary file read in oauth.authorize action 6.8 Medium -
zabbixUbuntu Insufficient permission check for the problem.view.refresh action 5.1 Medium -
zabbixUbuntu User information disclosure via api_jsonrpc.php on method user.get with param search 2.1 Low -
zabbixUbuntu LDAP 'Bind password' field value can be leaked by a Zabbix Super Admin 4.3 Medium -
zabbixUbuntu Secondary-order SQL injection in Zabbix Server when deleting an autoregistered host 7.5 High -
zabbixUbuntu API hostprototype.get lists data to users with insufficient authorization. 2.1 Low -
zabbixUbuntu Zabbix Agent 2 smartctl plugin argument injection in Zabbix 6.0 and later. 5.7 Medium -
zabbixUbuntu Zabbix Agent 2 smartctl plugin RCE vulnerability in Zabbix 5.0. 7.3 High -
zabbixUbuntu DoS vulnerability due to uncontrolled resource exhaustion 6.0 Medium -
zabbixUbuntu Reflected XSS vulnerability in /zabbix.php?action=export.valuemaps 7.5 High -
zabbixUbuntu Excessive information returned by user.get 2.1 Low -
zabbixUbuntu User enumeration via timing attack in Zabbix web interface 2.3 Low -
zabbixUbuntu SQL injection in Zabbix API 8.6 High -
zabbixUbuntu Unauthenticated Zabbix frontend takeover when SSO is being used 8.8 High -
zabbixUbuntu Media Types: Office365, SMTP passwords are unencrypted and visible in plaintext when exported 2.7 Low -
zabbixUbuntu Heap buffer over-read 2.7 Low -
zabbixUbuntu New line injection in Zabbix SNMP traps 3.7 Low -
zabbixUbuntu Use after free in browser_push_error 3.3 Low -
zabbixUbuntu JS - Internal strings in HTTP headers 9.1 Critical -
zabbixUbuntu JS - Crash on unexpected HTTP server response 3.3 Low -
zabbixUbuntu JS - Crash on empty HTTP server response 3.3 Low -
zabbixUbuntu SQL injection in user.get API 9.9 Critical -
zabbixUbuntu Use after free vulnerability in browser.c 4.4 Medium -
zabbixUbuntu Stack buffer overflow in zbx_snmp_cache_handle_engineid 3.0 Low - Show olderLoading…