Поиск уязвимостей
Количество 20
Количество 20
ALT-PU-2021-2668
ALT-PU-2021-2668: package `zabbix` update to version 5.4.3-alt1
CVE-2021-46088
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.
CVE-2021-46088
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.
CVE-2021-46088
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Exe ...
ALT-PU-2021-2582
ALT-PU-2021-2582: package `zabbix` update to version 5.4.3-alt1
GHSA-g5ff-j87h-3cwg
Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user.
BDU:2022-00879
Уязвимость универсальной системы мониторинга Zabbix , связанная с ошибками авторизации, позволяющая нарушителю выполнить произвольный код с root-привилегиями
CVE-2022-35230
An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
CVE-2022-35230
An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
CVE-2022-35230
An authenticated user can create a link with reflected Javascript code ...
CVE-2022-35229
An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
CVE-2022-35229
An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
CVE-2022-35229
An authenticated user can create a link with reflected Javascript code ...
SUSE-SU-2022:3101-1
Security update for zabbix
GHSA-6f4g-hm4f-cqp3
An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
BDU:2023-01712
Уязвимость универсальной системы мониторинга Zabbix, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных
GHSA-44qv-5wxp-8xqv
An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict.
BDU:2023-01711
Уязвимость универсальной системы мониторинга Zabbix, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных
ALT-PU-2022-1975
ALT-PU-2022-1975: package `zabbix` update to version 6.0.5-alt1
ALT-PU-2018-2422
ALT-PU-2018-2422: package `zabbix` update to version 4.0.0-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2021-2668 ALT-PU-2021-2668: package `zabbix` update to version 5.4.3-alt1 | CVSS3: 7.2 | около 5 лет назад | |
 | CVE-2021-46088 Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user. | CVSS3: 7.2 | 4% Низкий | почти 5 лет назад |
 | CVE-2021-46088 Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user. | CVSS3: 7.2 | 4% Низкий | почти 5 лет назад |
| CVE-2021-46088 Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Exe ... | CVSS3: 7.2 | 4% Низкий | почти 5 лет назад |
| ALT-PU-2021-2582 ALT-PU-2021-2582: package `zabbix` update to version 5.4.3-alt1 | CVSS3: 9.1 | около 5 лет назад | |
| GHSA-g5ff-j87h-3cwg Zabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with the "Zabbix Admin" role is able to run custom shell script on the application server in the context of the application user. | 4% Низкий | почти 5 лет назад | |
 | BDU:2022-00879 Уязвимость универсальной системы мониторинга Zabbix , связанная с ошибками авторизации, позволяющая нарушителю выполнить произвольный код с root-привилегиями | CVSS3: 7.2 | 4% Низкий | почти 5 лет назад |
| CVE-2022-35230 An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-35230 An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-35230 An authenticated user can create a link with reflected Javascript code ... | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-35229 An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-35229 An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| CVE-2022-35229 An authenticated user can create a link with reflected Javascript code ... | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
 | SUSE-SU-2022:3101-1 Security update for zabbix | 1% Низкий | около 4 лет назад | |
| GHSA-6f4g-hm4f-cqp3 An authenticated user can create a link with reflected Javascript code inside it for the graphs page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| BDU:2023-01712 Уязвимость универсальной системы мониторинга Zabbix, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| GHSA-44qv-5wxp-8xqv An authenticated user can create a link with reflected Javascript code inside it for the discovery page and send it to other users. The payload can be executed only with a known CSRF token value of the victim, which is changed periodically and is difficult to predict. | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| BDU:2023-01711 Уязвимость универсальной системы мониторинга Zabbix, связанная с непринятием мер по защите структуры веб-страницы, позволяющая нарушителю оказать воздействие на целостность данных | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2022-1975 ALT-PU-2022-1975: package `zabbix` update to version 6.0.5-alt1 | CVSS3: 5.4 | 1% Низкий | больше 4 лет назад |
| ALT-PU-2018-2422 ALT-PU-2018-2422: package `zabbix` update to version 4.0.0-alt1 | CVSS3: 5.4 | 1% Низкий | около 8 лет назад |
Уязвимостей на страницу