Rezultati pretraživanja za 'Proizvođač: zabbix'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2025-49643 | 6.5 | An authenticated Zabbix user (including Guest) is able to cause disproportionate CPU load on the webserver by sending specially crafted parameters to /imgstore.php, leading to potential denial of service. | 2026-09-26 00:10:00 | 2025-12-01 14:16:06 |
| CVE-2025-27232 | 4.9 | An authenticated Zabbix Super Admin can exploit the oauth.authorize action to read arbitrary files from the webserver leading to potential confidentiality loss. | 2026-09-26 00:10:00 | 2025-12-01 13:16:00 |
| CVE-2026-59781 | 7.8 | When Zabbix Agent was installed on Windows into a custom installation directory, the installer did not verify whether the selected directory had secure access permissions. If the target directory allowed unauthorized users to modify its contents, an | 2026-09-23 15:42:02 | 2026-08-18 13:17:25 |
| CVE-2026-23938 | 4.9 | An authenticated administrator is able to crash Zabbix server or proxy by creating specifically crafted preprocessing/script item JavaScript scripts, leading to potential denial of service. | 2026-09-23 15:41:10 | 2026-08-18 13:17:22 |
| CVE-2026-23931 | 4.3 | The frontend validatate.api.exists action can be exploited by authenticated users to extract plaintext user macro values leading to potential loss of confidentiality. | 2026-09-23 14:38:36 | 2026-08-18 13:17:21 |
| CVE-2026-23933 | 9.1 | In Zabbix 7.4 the cryptographic key used for signing Frontend sessions has been erroneously written to the database seed. Currently the only known exploitation scenario is for deployments that utilize both - SAML authentication and guest users. In su | 2026-09-23 14:31:46 | 2026-08-18 13:17:21 |
| CVE-2026-23934 | 6.5 | An authenticated user is able to cause disproportionate CPU load on the Frontend webserver by sending specifically crafted requests to the Frontend validate.api.exists action, leading to potential denial of service. | 2026-09-23 14:30:27 | 2026-08-18 13:17:21 |
| CVE-2026-23935 | 4.9 | A Zabbix administrator is able to read out of bounds memory by utilizing a flaw in script item/preprocessing (JavaScript) HttpRequest logic, leading to potential confidentiality loss. | 2026-09-23 14:17:37 | 2026-08-18 13:17:21 |
| CVE-2026-23937 | 6.5 | The Zabbix API host.get action can be exploited by authenticated users to extract a host's PSK key leading to potential loss of data integrity. | 2026-09-23 14:06:41 | 2026-08-18 13:17:21 |
| CVE-2026-23919 | 6.0 | For performance reasons Zabbix Server/Proxy reuses JavaScript (Duktape) contexts (used in script items, JavaScript reprocessing, Webhooks). This can lead to confidentiality loss where a regular (non-super) Zabbix administrator leaks data for hosts th | 2026-09-18 17:07:18 | 2026-03-24 19:16:49 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12
Zapisa po stranici: