Поиск уязвимостей

ALT-PU-2024-18030: package `zabbix` update to version 6.0.34-alt0.p10.1

Множественные уязвимости zabbix-server-pgsql

Множественные уязвимости zabbix-server-mysql

ALT-PU-2024-16527: package `zabbix` update to version 7.0.6-alt1

Security update for zabbix

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element.

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element.

When a URL is added to the map element, it is recorded in the database ...

When a URL is added to the map element, it is recorded in the database with sequential IDs. Upon adding a new URL, the system retrieves the last sysmapelementurlid value and increments it by one. However, an issue arises when a user manually changes the sysmapelementurlid value by adding sysmapelementurlid + 1. This action prevents others from adding URLs to the map element.

Уязвимость сервера универсальной системы мониторинга Zabbix, связанная с недостаточной проверкой входных данных, позволяющая нарушителю повысить свои привилегии

Множественные уязвимости zabbix7-lts-server-pgsql

Множественные уязвимости zabbix7-lts-server-mysql

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

The HttpRequest object allows to get the HTTP headers from the server' ...

The HttpRequest object allows to get the HTTP headers from the server's response after sending the request. The problem is that the returned strings are created directly from the data returned by the server and are not correctly encoded for JavaScript. This allows to create internal strings that can be used to access hidden properties of objects.

Уязвимость сервера универсальной системы мониторинга Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

ALT-PU-2021-5022: package `zabbix` update to version 5.4.6-alt1

ALT-PU-2021-4862: package `zabbix` update to version 5.4.7-alt1

A Zabbix adminitrator can inject arbitrary SQL during the autoremoval of hosts by inserting malicious SQL in the 'Visible name' field.