Rezultati pretraživanja za 'Proizvođač: zabbix'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2017-2824 | 6.8 | An exploitable code execution vulnerability exists in the trapper command functionality of Zabbix Server 2.4.X. A specially crafted set of packets can cause a command injection resulting in remote code execution. An attacker can make requests from an | 2019-10-03 00:03:00 | 2017-05-24 14:29:00 |
| CVE-2017-2826 | 4.3 | An information disclosure vulnerability exists in the iConfig proxy request of Zabbix server 2.4.X. A specially crafted iConfig proxy request can cause the Zabbix server to send the configuration information of any Zabbix proxy, resulting in informat | 2019-03-13 17:50:00 | 2018-04-09 20:29:00 |
| CVE-2008-1353 | 4.3 | zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero. | 2018-10-11 20:31:00 | 2008-03-17 17:44:00 |
| CVE-2010-5049 | 7.5 | SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the nav_time parameter. | 2018-10-10 20:08:00 | 2011-11-23 01:55:00 |
| CVE-2010-1277 | 7.5 | SQL injection vulnerability in the user.authenticate method in the API in Zabbix 1.8 before 1.8.2 allows remote attackers to execute arbitrary SQL commands via the user parameter in JSON data to api_jsonrpc.php. | 2018-10-10 19:56:00 | 2010-04-06 16:30:00 |
| CVE-2016-4338 | 6.8 | The mysql user parameter configuration script (userparameter_mysql.conf) in the agent in Zabbix before 2.0.18, 2.2.x before 2.2.13, and 3.0.x before 3.0.3, when used with a shell other than bash, allows context-dependent attackers to execute arbitrar | 2018-10-09 20:00:00 | 2017-01-23 21:59:00 |
| CVE-2014-3005 | 7.5 | XML external entity (XXE) vulnerability in Zabbix 1.8.x before 1.8.21rc1, 2.0.x before 2.0.13rc1, 2.2.x before 2.2.5rc1, and 2.3.x before 2.3.2 allows remote attackers to read arbitrary files or potentially execute arbitrary code via a crafted DTD in | 2018-02-21 14:57:00 | 2018-02-01 17:29:00 |
| CVE-2016-10134 | 7.5 | SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the toggle_ids array parameter in latest.php. | 2017-11-04 01:29:00 | 2017-02-17 02:59:00 |
| CVE-2012-3435 | 7.5 | SQL injection vulnerability in frontends/php/popup_bitem.php in Zabbix 1.8.15rc1 and earlier, and 2.x before 2.0.2rc1, allows remote attackers to execute arbitrary SQL commands via the itemid parameter. | 2017-08-29 01:31:00 | 2012-08-15 20:55:00 |
| CVE-2011-4615 | 4.3 | Multiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to | 2017-08-29 01:30:00 | 2011-12-29 22:55:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12
Zapisa po stranici: