https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 12:49:56 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-01709 bdu:2023-01709 https://cve.radiocsirt.org/vuln/bdu:2023-01709 https://cve.radiocsirt.org/vuln/cnvd-2022-22698 cnvd-2022-22698 https://cve.radiocsirt.org/vuln/cnvd-2022-22698 https://cve.radiocsirt.org/vuln/euvd-2026-258337 EUVD-2026-258337 https://cve.radiocsirt.org/vuln/euvd-2026-258337 https://cve.radiocsirt.org/vuln/fkie_cve-2022-24349 <p>An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim’s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel.</p> <p>An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim’s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-24349 https://cve.radiocsirt.org/vuln/ghsa-vv83-2f3m-pvxg <p>An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim’s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel.</p> <p>An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim’s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel.</p> https://cve.radiocsirt.org/vuln/ghsa-vv83-2f3m-pvxg https://cve.radiocsirt.org/vuln/gsd-2022-24349 gsd-2022-24349 https://cve.radiocsirt.org/vuln/gsd-2022-24349 https://cve.radiocsirt.org/vuln/opensuse-su-2024:11934-1 <p>zabbix-agent-4.0.39-1.1 on GA media</p> <p>zabbix-agent-4.0.39-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:11934-1 https://cve.radiocsirt.org/vuln/suse-su-2022:1254-1 <p>Security update for zabbix</p> <p>Security update for zabbix</p> https://cve.radiocsirt.org/vuln/suse-su-2022:1254-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24349 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix</p> <p>An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim’s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel.</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix</p> <p>An authenticated user can create a link with reflected XSS payload for actions’ pages, and send it to other users. Malicious code has access to all the same objects as the rest of the web page and can make arbitrary modifications to the contents of the page being displayed to a victim. This attack can be implemented with the help of social engineering and expiration of a number of factors - an attacker should have authorized access to the Zabbix Frontend and allowed network connection between a malicious server and victim’s computer, understand attacked infrastructure, be recognized by the victim as a trustee and use trusted communication channel.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-24349 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0948 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0948