Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-42333

Heap buffer over-read

The researcher is showing that it is possible to leak a small amount of Zabbix Server memory using an out of bounds read in src/libs/zbxmedia/email.c

CVSS 3.1 · 2.7 Low EPSS < 1% KEV · Not listed
Vendors
Zabbix
Products
Zabbix Zabbix Server
CVE-2023-32727

Code execution vulnerability in icmpping

An attacker who has the privilege to configure Zabbix items can use function icmpping() with additional malicious command inside it to execute arbitrary code on the current Zabbix server.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Zabbix
Products
Zabbix Server
CVE-2024-22120

Time Based SQL Injection in Zabbix Server Audit Log

Zabbix server can perform command execution for configured scripts. After command is executed, audit entry is added to "Audit Log". Due to "clientip" field is not sanitized, it is possible to injection SQL into "clientip" and exploit time based blind SQL injection.

CVSS 3.1 · 9.1 Critical EPSS 76.6% KEV · Not listed
Vendors
Zabbix
Products
Zabbix Zabbix Server
CVE-2023-32725

Leak of zbx_session cookie when using a scheduled report that includes a dashboard with a URL widget.

The website configured in the URL widget will receive a session cookie when testing or executing scheduled reports. The received session cookie can then be used to access the frontend as the particular user.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed
Vendors
Zabbix
Products
Frontend Zabbix Server