Поиск уязвимостей
Количество 23
Количество 23
ALT-PU-2025-16566
ALT-PU-2025-16566: package `zabbix` update to version 7.0.8-alt0.p10.1
ALT-PU-2025-5998
ALT-PU-2025-5998: package `zabbix` update to version 7.0.12-alt0.p10.1
ALT-PU-2025-5871
ALT-PU-2025-5871: package `zabbix` update to version 7.0.12-alt0.p11.1
CVE-2024-36465
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.
CVE-2024-36465
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.
CVE-2024-36465
A low privilege (regular) Zabbix user with API access can use SQL inje ...
CVE-2024-45699
The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser.
CVE-2024-45699
The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser.
CVE-2024-45699
The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross- ...
GHSA-9g97-3vch-5xc2
A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter.
BDU:2025-05633
Уязвимость компонента API универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольные команды
GHSA-xc8w-x6qp-w4p7
The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser.
BDU:2025-05634
Уязвимость веб-интейрфеса универсальной системы мониторинга Zabbix, позволяющая нарушителю провести атаку межсайтового скриптинга
ROS-20250505-05
Уязвимость zabbix7-lts-server-mysql
ROS-20250505-04
Уязвимость zabbix7-lts-server-pgsql
ALT-PU-2025-16480
ALT-PU-2025-16480: package `zabbix` update to version 7.0.8-alt1
ROS-20250616-24
Уязвимость zabbix-server-pgsql
ROS-20250616-23
Уязвимость zabbix-server-mysql
ALT-PU-2024-17948
ALT-PU-2024-17948: package `zabbix` update to version 7.0.7-alt1
ROS-20250616-26
Множественные уязвимости zabbix7-lts-server-pgsql
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2025-16566 ALT-PU-2025-16566: package `zabbix` update to version 7.0.8-alt0.p10.1 | CVSS3: 8.8 | почти 2 года назад | |
| ALT-PU-2025-5998 ALT-PU-2025-5998: package `zabbix` update to version 7.0.12-alt0.p10.1 | CVSS3: 8.8 | больше 1 года назад | |
| ALT-PU-2025-5871 ALT-PU-2025-5871: package `zabbix` update to version 7.0.12-alt0.p11.1 | CVSS3: 8.8 | больше 1 года назад | |
 | CVE-2024-36465 A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter. | CVSS3: 8.8 | 40% Средний | больше 1 года назад |
 | CVE-2024-36465 A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter. | CVSS3: 8.8 | 40% Средний | больше 1 года назад |
| CVE-2024-36465 A low privilege (regular) Zabbix user with API access can use SQL inje ... | CVSS3: 8.8 | 40% Средний | больше 1 года назад |
| CVE-2024-45699 The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| CVE-2024-45699 The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| CVE-2024-45699 The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross- ... | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| GHSA-9g97-3vch-5xc2 A low privilege (regular) Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter. | CVSS3: 8.8 | 40% Средний | больше 1 года назад |
 | BDU:2025-05633 Уязвимость компонента API универсальной системы мониторинга Zabbix, позволяющая нарушителю выполнить произвольные команды | CVSS3: 8 | 40% Средний | больше 1 года назад |
| GHSA-xc8w-x6qp-w4p7 The endpoint /zabbix.php?action=export.valuemaps suffers from a Cross-Site Scripting vulnerability via the backurl parameter. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload may be injected into the above endpoint causing it to be executed within the context of the victim's browser. | CVSS3: 5.4 | 0% Низкий | больше 1 года назад |
| BDU:2025-05634 Уязвимость веб-интейрфеса универсальной системы мониторинга Zabbix, позволяющая нарушителю провести атаку межсайтового скриптинга | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | ROS-20250505-05 Уязвимость zabbix7-lts-server-mysql | CVSS3: 8 | 40% Средний | больше 1 года назад |
| ROS-20250505-04 Уязвимость zabbix7-lts-server-pgsql | CVSS3: 8 | 40% Средний | больше 1 года назад |
| ALT-PU-2025-16480 ALT-PU-2025-16480: package `zabbix` update to version 7.0.8-alt1 | CVSS3: 8.8 | 40% Средний | почти 2 года назад |
| ROS-20250616-24 Уязвимость zabbix-server-pgsql | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| ROS-20250616-23 Уязвимость zabbix-server-mysql | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| ALT-PU-2024-17948 ALT-PU-2024-17948: package `zabbix` update to version 7.0.7-alt1 | CVSS3: 7.5 | 0% Низкий | почти 2 года назад |
| ROS-20250616-26 Множественные уязвимости zabbix7-lts-server-pgsql | CVSS3: 7.5 | больше 1 года назад |
Уязвимостей на страницу