Skip to contentZabbix vulnerabilities
Newest
- zabbix zabbix-agent2The zabbix-agent2 package before 5.4.9-r1 for Alpine Linux sometimes allows privilege escalation...CVE-2022-22704Fix available9.8 Critical
- zabbixIn Zabbix before 4.0.28rc1, 5.x before 5.0.8rc1, 5.1.x and 5.2.x before 5.2.4rc1, and 5.3.x and 5...CVE-2021-27927Fix available8.8 High
- zabbix, debian linux, opensuse backports sle +1 more +3 moreZabbix Server 2.2.x and 3.0.x before 3.0.31, and 3.2 allows remote attackers to execute arbitrary...CVE-2020-11800Public exploitFix available9.0 Critical
- zabbix, debian linux, fedoraproject fedora +2 more +4 moreZabbix before 3.0.32rc1, 4.x before 4.0.22rc1, 4.1.x through 4.4.x before 4.4.10rc1, and 5.x...CVE-2020-15803Fix availableEPSS 32.3%6.1 Medium
- zabbixA File Inclusion vulnerability exists in Zabbix 2.0.6 due to inadequate sanitization of request...CVE-2013-3738Fix available9.8 Critical
- zabbixZabbix 2.0.9 has an Arbitrary Command Execution VulnerabilityCVE-2013-3628Public exploitEPSS 67.5%8.8 High
- zabbixZabbix before 5.0 represents passwords in the users table with unsalted MD5.CVE-2013-7484Fix available7.5 High
- zabbixAn issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4....CVE-2019-17382Fix availableEPSS 53.2%9.1 Critical
- zabbix, debian linux +1 moreZabbix through 4.4.0alpha1 allows User Enumeration. With login requests, it is possible to...CVE-2019-15132Fix available5.3 Medium
- zabbix, debian linux +1 moreZabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3...CVE-2016-10742Fix available6.1 Medium
- talos zabbix, debian linux +1 moreAn information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4...CVE-2017-2826Fix available3.7 Low
- talos zabbix, debian linux +1 moreIn the trapper functionality of Zabbix Server 2.4.x, specifically crafted trapper packets can...CVE-2017-2825Fix available7.0 High
- zabbix, zabbix server +1 moreAn exploitable code execution vulnerability exists in the trapper command functionality of Zabbix...CVE-2017-2824Public exploitFix availableEPSS 26.1%8.1 High
- zabbixSQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers...CVE-2016-10134Public exploitFix availableEPSS 82.7%9.8 Critical
- zabbixThe mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix...CVE-2016-4338Public exploitFix availableEPSS 25.2%8.1 High
- zabbixMultiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22,...CVE-2014-9450Fix available7.5 High
- zabbix, fedoraproject fedora +1 moreXML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1,...CVE-2014-3005Fix available9.8 Critical
- zabbix, fedoraproject fedora +1 moreThe Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows...CVE-2014-1685Fix available5.5 Medium
- zabbix, fedoraproject fedora +1 moreThe API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows...CVE-2014-1682Fix available4.0 Medium
- zabbixlibs/zbxmedia/eztexting.c in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.8rc1, and 2.1.x...CVE-2012-6086Fix available4.3 Medium
- zabbixMultiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1,...CVE-2013-5743Public exploitFix availableEPSS 80.0%9.8 Critical
- zabbixZabbix before 1.8.19rc1, 2.0 before 2.0.10rc1, and 2.2 before 2.2.1rc1 allows remote Zabbix...CVE-2013-6824Fix available7.5 High
- zabbixThe user.login function in Zabbix before 1.8.16 and 2.x before 2.0.5rc1 allows remote attackers...CVE-2013-1364Fix available5.0 Medium
- zabbixZabbix 2.0.5 allows remote authenticated users to discover the LDAP bind password by leveraging...CVE-2013-5572Public exploitFix available3.5 Low
- zabbixSQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and...CVE-2012-3435Public exploitFix available7.5 High
- zabbixCross-site scripting (XSS) vulnerability in ZABBIX before 1.8.10 allows remote attackers to...CVE-2011-5027Fix available4.3 Medium
- zabbixMultiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote...CVE-2011-4615Fix available4.3 Medium
- zabbixSQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions...CVE-2011-4674Public exploitFix available7.5 High
- zabbixSQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to...CVE-2010-5049Fix available7.5 High
- zabbixpopup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary...CVE-2011-3265Fix available5.0 Medium
- zabbixZabbix before 1.8.6 allows remote attackers to obtain sensitive information via an invalid...CVE-2011-3264Fix available5.0 Medium
- zabbixzabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to...CVE-2011-3263Fix available5.0 Medium
- zabbixCross-site scripting (XSS) vulnerability in acknow.php in Zabbix before 1.8.6 allows remote...CVE-2011-2904Fix available4.3 Medium
- zabbixMultiple cross-site scripting (XSS) vulnerabilities in the formatQuery function in frontends/php...CVE-2010-2790Fix available4.3 Medium
- zabbixSQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2...CVE-2010-1277Fix available7.5 High
- zabbixThe NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or...CVE-2009-4502Public exploitFix availableEPSS 21.6%9.3 High
- zabbixThe zbx_get_next_field function in libs/zbxcommon/str.c in Zabbix Server before 1.6.8 allows...CVE-2009-4501Public exploitFix available5.0 Medium
- zabbixThe process_trap function in trapper/trapper.c in Zabbix Server before 1.6.6 allows remote...CVE-2009-4500Fix available5.0 Medium
- zabbixSQL injection vulnerability in the get_history_lastid function in the nodewatcher component in...CVE-2009-4499Public exploitFix available7.5 High
- zabbixThe node_process_command function in Zabbix Server before 1.8 allows remote attackers to execute...CVE-2009-4498Public exploitFix availableEPSS 31.9%6.8 Medium
- zabbixzabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and...CVE-2008-1353Public exploitFix available4.3 Medium
- zabbix agentdzabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might...CVE-2007-6210Public exploitFix available2.1 Low
- zabbixBuffer overflow in ZABBIX before 1.1.5 has unknown impact and attack vectors related to "SNMP IP...CVE-2007-0640Fix available10.0 High
- zabbixMultiple buffer overflows in zabbix before 20061006 allow attackers to cause a denial of service ...CVE-2006-6693Fix available7.5 High
- zabbixMultiple format string vulnerabilities in zabbix before 20061006 allow attackers to cause a...CVE-2006-6692Public exploitFix available7.5 High