zabbix vulnerabilities (Ubuntu)
99 vulnerabilities.
zabbixUbuntuAuthentication privilege escalation via user groups due to missing authorization checks7.5 HighzabbixUbuntuThe implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and...6.5 MediumzabbixUbuntuValue of sysmap_element_url can be de-synchronized causing the map element to crash when new URLs is added2.2 LowzabbixUbuntuZabbix Arbitrary File Read2.7 LowzabbixUbuntuRemote code execution within ping script9.9 CriticalzabbixUbuntuSystem Information Widget in Global View Dashboard exposes information about Hosts to Users without Permission4.3 MediumzabbixUbuntuAllocation of resources without limits or throttling (uncontrolled resource consumption)7.5 HighzabbixUbuntuDirect access to memory pointers within the JS engine for modification9.1 CriticalzabbixUbuntuFront-end audit log shows passwords in plaintext8.1 HighzabbixUbuntuAT(GSM) Command Injection3.0 LowzabbixUbuntuZabbix Agent MSI Installer Allows Non-Admin User to Access Change Option via msiexec.exe6.1 MediumzabbixUbuntuTime Based SQL Injection in Zabbix Server Audit Log9.1 CriticalzabbixUbuntuStored XSS in graph items select form5.5 MediumzabbixUbuntuCode injection in zabbix_agent2 smart.disk.get caused by smartctl plugin4.6 MediumzabbixUbuntuCode execution vulnerability in icmpping6.8 MediumzabbixUbuntuPossible buffer overread from reading DNS responses3.9 LowzabbixUbuntuJavaScript engine memory pointers are directly available for Zabbix users for modification9.1 CriticalzabbixUbuntuInefficient permission check in class CControllerAuthenticationUpdate8.5 HighzabbixUbuntuStored XSS in Maps element7.6 HighzabbixUbuntuInsufficient validation of Action form input fields6.3 MediumzabbixUbuntuDuktape 2.6 bug crashes JavaScript putting too many values in valstack.5.9 MediumzabbixUbuntuInefficient URL schema validation5.7 MediumzabbixUbuntuReflected XSS in several fields of graph form5.4 MediumzabbixUbuntuPersistent XSS in the user form5.4 MediumzabbixUbuntuUnauthorized limited filesystem access from preprocessing8.5 HighzabbixUbuntuLimited control of resource utilization in JS preprocessing5.9 MediumzabbixUbuntuX-Forwarded-For header is active by default causes access to Zabbix sites in maintenance mode5.3 MediumzabbixUbuntuReflected XSS in graphs page of Zabbix Frontend3.7 LowzabbixUbuntuReflected XSS in discovery page of Zabbix Frontend3.7 LowzabbixUbuntuReflected XSS in graph configuration window of Zabbix Frontend3.7 LowzabbixUbuntuReflected XSS in item configuration window of Zabbix Frontend3.7 LowzabbixUbuntuReflected XSS in service configuration window of Zabbix Frontend3.7 LowzabbixUbuntuReflected XSS in action configuration window of Zabbix Frontend4.6 MediumzabbixUbuntusha256crypt and sha512crypt through 0.6 allow attackers to cause a denial of service (CPU...7.5 HighzabbixUbuntuZabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with...7.2 HighzabbixUbuntuStored XSS in host groups configuration window in Zabbix Frontend6.3 MediumzabbixUbuntuIncorrect permissions of [/var/run/zabbix] forces dac_override3.3 LowzabbixUbuntuIn Zabbix before 4.0.28rc1, 5.x before 5.0.8rc1, 5.1.x and 5.2.x before 5.2.4rc1, and 5.3.x and 5...8.8 HighzabbixUbuntuZabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary...9.0 CriticalzabbixUbuntuZabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x...6.1 MediumzabbixUbuntuZabbix before 5.0 represents passwords in the users table with unsalted MD5.7.5 HighzabbixUbuntuZabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to...5.3 MediumzabbixUbuntuZabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3...6.1 MediumzabbixUbuntuAn information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4...3.7 LowzabbixUbuntuIn the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can...7.0 HighzabbixUbuntuAn exploitable code execution vulnerability exists in the trapper command functionality of Zabbix...8.1 HighzabbixUbuntuSQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers...9.8 CriticalzabbixUbuntuThe mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix...8.1 HighzabbixUbuntuXML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1,...9.8 Critical