Поиск уязвимостей
Количество 47
Количество 47
BDU:2026-06431
Уязвимость пользовательского интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольный код
ROS-20260707-80-0005
Уязвимость zabbix7.4
ROS-20260707-80-0004
Уязвимость zabbix7-lts
ROS-20260707-73-0005
Уязвимость zabbix7.4
ROS-20260707-73-0004
Уязвимость zabbix7-lts
CVE-2026-23928
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0.
CVE-2026-23928
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0.
CVE-2026-23928
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in ...
CVE-2026-23927
A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.
CVE-2026-23927
A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.
CVE-2026-23927
A user able to connect to Agent 2 can inject an Oracle TNS connection ...
ROS-20260707-80-0008
Уязвимость zabbix7.4
ROS-20260707-80-0007
Уязвимость zabbix7-lts
ROS-20260707-80-0006
Уязвимость zabbix-lts
GHSA-r8x9-p5v6-vx46
A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session.
GHSA-qjqp-r6hf-xpqh
The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0.
BDU:2026-10416
Уязвимость компонента Zabbix Agent 2 системы мониторинга ИТ-инфраструктуры Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
BDU:2026-06432
Уязвимость пользовательского интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольный JavaScript-код
ROS-20260707-80-0003
Уязвимость zabbix7.4
ROS-20260707-80-0002
Уязвимость zabbix7-lts
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2026-06431 Уязвимость пользовательского интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.4 | 0% Низкий | 6 месяцев назад |
 | ROS-20260707-80-0005 Уязвимость zabbix7.4 | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-80-0004 Уязвимость zabbix7-lts | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-73-0005 Уязвимость zabbix7.4 | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-73-0004 Уязвимость zabbix7-lts | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
 | CVE-2026-23928 The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-23928 The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| CVE-2026-23928 The Item history widget (in Zabbix 7.0+) or the Plain text widget (in ... | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| CVE-2026-23927 A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session. | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| CVE-2026-23927 A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session. | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| CVE-2026-23927 A user able to connect to Agent 2 can inject an Oracle TNS connection ... | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| ROS-20260707-80-0008 Уязвимость zabbix7.4 | CVSS3: 4.1 | 0% Низкий | 4 месяца назад |
| ROS-20260707-80-0007 Уязвимость zabbix7-lts | CVSS3: 4.1 | 0% Низкий | 4 месяца назад |
| ROS-20260707-80-0006 Уязвимость zabbix-lts | CVSS3: 4.1 | 0% Низкий | 4 месяца назад |
| GHSA-r8x9-p5v6-vx46 A user able to connect to Agent 2 can inject an Oracle TNS connection string via the 'service' parameter. This can lead to Agent 2 connecting to an attacker-controlled server and leaking Oracle database credentials if they are saved in a named session. | CVSS3: 6.5 | 0% Низкий | 6 месяцев назад |
| GHSA-qjqp-r6hf-xpqh The Item history widget (in Zabbix 7.0+) or the Plain text widget (in Zabbix 6.0) can execute injected JavaScript when HTML display is enabled. This can allow an attacker to perform unauthorized actions depending on which user opens a dashboard containing these widgets. The malicious JavaScript would have to come from a monitored host controlled by the attacker. Note: the Item history widget is a replacement for the Plain text widget since Zabbix 7.0. | CVSS3: 6.8 | 0% Низкий | 6 месяцев назад |
| BDU:2026-10416 Уязвимость компонента Zabbix Agent 2 системы мониторинга ИТ-инфраструктуры Zabbix, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации | CVSS3: 4.1 | 0% Низкий | 6 месяцев назад |
| BDU:2026-06432 Уязвимость пользовательского интерфейса универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольный JavaScript-код | CVSS3: 8.4 | 0% Низкий | 6 месяцев назад |
| ROS-20260707-80-0003 Уязвимость zabbix7.4 | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
| ROS-20260707-80-0002 Уязвимость zabbix7-lts | CVSS3: 8.4 | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу