Поиск уязвимостей
Количество 10
Количество 10
CVE-2024-22122
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
CVE-2024-22122
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
CVE-2024-22122
Zabbix allows to configure SMS notifications. AT command injection occ ...
GHSA-m34r-jrv8-mwmv
Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem.
BDU:2024-07007
Уязвимость универсальной системы мониторинга Zabbix, связанная с неправильной нейтрализацией специальных элементов, используемых в команде, позволяющая нарушителю выполнить дополнительные AT-команды на модеме
ALT-PU-2024-17947
ALT-PU-2024-17947: package `zabbix` update to version 7.0.0-alt1
ROS-20240910-06
Множественные уязвимости zabbix
ALT-PU-2024-15832
ALT-PU-2024-15832: package `zabbix` update to version 6.0.36-alt0.p10.1
ALT-PU-2024-10755
ALT-PU-2024-10755: package `zabbix` update to version 6.0.32-alt0.p10.2
ALT-PU-2021-2582
ALT-PU-2021-2582: package `zabbix` update to version 5.4.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-22122 Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. | CVSS3: 9.1 | 2% Низкий | около 2 лет назад |
 | CVE-2024-22122 Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. | CVSS3: 9.1 | 2% Низкий | около 2 лет назад |
| CVE-2024-22122 Zabbix allows to configure SMS notifications. AT command injection occ ... | CVSS3: 9.1 | 2% Низкий | около 2 лет назад |
| GHSA-m34r-jrv8-mwmv Zabbix allows to configure SMS notifications. AT command injection occurs on "Zabbix Server" because there is no validation of "Number" field on Web nor on Zabbix server side. Attacker can run test of SMS providing specially crafted phone number and execute additional AT commands on modem. | CVSS3: 3 | 2% Низкий | около 2 лет назад |
 | BDU:2024-07007 Уязвимость универсальной системы мониторинга Zabbix, связанная с неправильной нейтрализацией специальных элементов, используемых в команде, позволяющая нарушителю выполнить дополнительные AT-команды на модеме | CVSS3: 3 | 2% Низкий | около 2 лет назад |
| ALT-PU-2024-17947 ALT-PU-2024-17947: package `zabbix` update to version 7.0.0-alt1 | CVSS3: 9.1 | больше 2 лет назад | |
 | ROS-20240910-06 Множественные уязвимости zabbix | CVSS3: 9.1 | около 2 лет назад | |
| ALT-PU-2024-15832 ALT-PU-2024-15832: package `zabbix` update to version 6.0.36-alt0.p10.1 | CVSS3: 9.1 | почти 2 года назад | |
| ALT-PU-2024-10755 ALT-PU-2024-10755: package `zabbix` update to version 6.0.32-alt0.p10.2 | CVSS3: 9.9 | около 2 лет назад | |
| ALT-PU-2021-2582 ALT-PU-2021-2582: package `zabbix` update to version 5.4.3-alt1 | CVSS3: 9.1 | около 5 лет назад |
Уязвимостей на страницу