GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Bundle

Zabbix

Created on 2024-12-04 05:44, updated on 2024-12-04 08:17, by Alexandre Dulaunoy
Description
  • cve-2024-22116 9.9 (v3.1) Remote code execution within ping script Zabbix
  • cve-2024-36466 8.8 (v3.1) Unauthenticated Zabbix frontend takeover when SSO is b… Zabbix
  • cve-2024-36467 7.5 (v3.1) Authentication privilege escalation via user groups du… Zabbix
  • cve-2024-42330 9.1 (v3.1) JS - Internal strings in HTTP headers Zabbix
  • cve-2024-42327 9.9 (v3.1) SQL injection in user.get API Zabbix

Vulnerabilities included in this bundle
Combined detection rules

Detection rules are retrieved from Rulezet.

Loading…
Combined sightings
Sightings 78 total Published Proof of Concept: 32 Seen: 46
Author Vulnerability Source Type Date