Поиск уязвимостей
Количество 20
Количество 20
ALT-PU-2014-2165
ALT-PU-2014-2165: package `zabbix` update to version 2.4.0-alt1
CVE-2014-9450
Multiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the (1) itemid or (2) periods parameter.
CVE-2014-9450
Multiple SQL injection vulnerabilities in chart_bar.php in the fronten ...
GHSA-rq9v-pgww-544v
Multiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the (1) itemid or (2) periods parameter.
CVE-2016-10134
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php.
CVE-2016-10134
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php.
CVE-2016-10134
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0 ...
GHSA-q33m-pmcq-844x
SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php.
ALT-PU-2016-1782
ALT-PU-2016-1782: package `zabbix` update to version 3.0.4-alt1
CVE-2016-10742
Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter.
CVE-2016-10742
Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter.
CVE-2016-10742
Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before ...
CVE-2016-4338
The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter.
CVE-2016-4338
The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter.
CVE-2016-4338
The mysql user parameter configuration script (userparameter_mysql.con ...
GHSA-q7cw-45fg-vx6f
Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter.
ALT-PU-2017-2601
ALT-PU-2017-2601: package `zabbix` update to version 3.4.4-alt1
GHSA-399r-wgcm-v67f
The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter.
ALT-PU-2016-1518
ALT-PU-2016-1518: package `zabbix` update to version 3.0.3-alt1
ALT-PU-2016-1167
ALT-PU-2016-1167: package `zabbix` update to version 3.0.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2014-2165 ALT-PU-2014-2165: package `zabbix` update to version 2.4.0-alt1 | CVSS3: 9.8 | около 12 лет назад | |
 | CVE-2014-9450 Multiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the (1) itemid or (2) periods parameter. | CVSS2: 7.5 | 1% Низкий | почти 12 лет назад |
| CVE-2014-9450 Multiple SQL injection vulnerabilities in chart_bar.php in the fronten ... | CVSS2: 7.5 | 1% Низкий | почти 12 лет назад |
| GHSA-rq9v-pgww-544v Multiple SQL injection vulnerabilities in chart_bar.php in the frontend in Zabbix before 1.8.22, 2.0.x before 2.0.14, and 2.2.x before 2.2.8 allow remote attackers to execute arbitrary SQL commands via the (1) itemid or (2) periods parameter. | 1% Низкий | больше 4 лет назад | |
 | CVE-2016-10134 SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php. | CVSS3: 9.8 | 83% Высокий | больше 9 лет назад |
| CVE-2016-10134 SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php. | CVSS3: 9.8 | 83% Высокий | больше 9 лет назад |
| CVE-2016-10134 SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0 ... | CVSS3: 9.8 | 83% Высокий | больше 9 лет назад |
| GHSA-q33m-pmcq-844x SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php. | CVSS3: 9.8 | 83% Высокий | больше 4 лет назад |
| ALT-PU-2016-1782 ALT-PU-2016-1782: package `zabbix` update to version 3.0.4-alt1 | CVSS3: 9.8 | 83% Высокий | больше 10 лет назад |
| CVE-2016-10742 Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter. | CVSS3: 6.1 | 3% Низкий | больше 7 лет назад |
| CVE-2016-10742 Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter. | CVSS3: 6.1 | 3% Низкий | больше 7 лет назад |
| CVE-2016-10742 Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before ... | CVSS3: 6.1 | 3% Низкий | больше 7 лет назад |
| CVE-2016-4338 The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter. | CVSS3: 8.1 | 25% Средний | почти 10 лет назад |
| CVE-2016-4338 The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter. | CVSS3: 8.1 | 25% Средний | почти 10 лет назад |
| CVE-2016-4338 The mysql user parameter configuration script (userparameter_mysql.con ... | CVSS3: 8.1 | 25% Средний | почти 10 лет назад |
| GHSA-q7cw-45fg-vx6f Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1 allows open redirect via the request parameter. | CVSS3: 6.1 | 3% Низкий | больше 4 лет назад |
| ALT-PU-2017-2601 ALT-PU-2017-2601: package `zabbix` update to version 3.4.4-alt1 | CVSS3: 6.1 | 3% Низкий | около 9 лет назад |
| GHSA-399r-wgcm-v67f The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrary code or SQL commands via the mysql.size parameter. | CVSS3: 8.1 | 25% Средний | больше 4 лет назад |
| ALT-PU-2016-1518 ALT-PU-2016-1518: package `zabbix` update to version 3.0.3-alt1 | CVSS3: 8.1 | 25% Средний | больше 10 лет назад |
| ALT-PU-2016-1167 ALT-PU-2016-1167: package `zabbix` update to version 3.0.1-alt1 | CVSS3: 8.1 | 25% Средний | больше 10 лет назад |
Уязвимостей на страницу