https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:26:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10543 bdu:2024-10543 https://cve.radiocsirt.org/vuln/bdu:2024-10543 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1028 certfr-2024-avi-1028 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1028 https://cve.radiocsirt.org/vuln/euvd-2026-205750 EUVD-2026-205750 https://cve.radiocsirt.org/vuln/euvd-2026-205750 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42327 <p>A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.</p> <p>A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-42327 https://cve.radiocsirt.org/vuln/ghsa-gx59-7g62-6xhg <p>A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.</p> <p>A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.</p> https://cve.radiocsirt.org/vuln/ghsa-gx59-7g62-6xhg https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42327 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: zabbix, Ubuntu:Pro:16.04:LTS: zabbix, Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix</p> <p>A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: zabbix, Ubuntu:Pro:16.04:LTS: zabbix, Ubuntu:Pro:20.04:LTS: zabbix, Ubuntu:Pro:22.04:LTS: zabbix</p> <p>A non-admin user account on the Zabbix frontend with the default User role, or with any other role that gives API access can exploit this vulnerability. An SQLi exists in the CUser class in the addRelatedObjects function, this function is being called from the CUser.get function which is available for every user who has API access.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-42327 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3562 <p>Ein Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um vertrauliche Informationen preiszugeben, einen Denial-of-Service-Zustand zu erzeugen, erhöhte Rechte zu erlangen, beliebigen Code auszuführen und Daten zu manipulieren.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Zabbix ausnutzen, um vertrauliche Informationen preiszugeben, einen Denial-of-Service-Zustand zu erzeugen, erhöhte Rechte zu erlangen, beliebigen Code auszuführen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3562