CVE CyberSecurity Database News (Page 515)

Nov 27, 2024 Exploit

CVE-2024-36464 - Exposing Passwords in YAML When Exporting Media Types – What You Need to Know

In June 2024, the vulnerability CVE-2024-36464 caught the attention of security professionals and system administrators working with Zabbix. This issue is described as follows: When

Nov 27, 2024

CVE-2024-42332 - How Forged SNMP Traps Poison Zabbix UI With Fake Data

*Written by a security researcher for exclusive insights into Zabbix SNMP trap handling gone wrong.* 1. Introduction Most folks trust their network monitoring tools, especially

Nov 27, 2024 Exploit

CVE-2024-42333 - Out-of-Bounds Read in Zabbix Server Email Media – How Attackers Can Leak Server Memory

Zabbix is one of the most popular open-source IT monitoring solutions today, widely trusted for real-time visibility into thousands of production systems. But in June

Nov 27, 2024 API Exploit

CVE-2024-42330 - Exploiting HttpRequest Object’s Header Handling for Prototype Pollution in JavaScript

In June 2024, CVE-2024-42330 shed light on a subtle but powerful security flaw involving the HttpRequest object in common JavaScript libraries and environments. The vulnerability

Nov 27, 2024 RCE API Exploit

CVE-2024-42331 - Understanding the Use-After-Free Bug in Zabbix’s Duktape Integration

On June 2024, a critical security vulnerability was disclosed in Zabbix, an enterprise-grade open source monitoring tool. This bug, CVE-2024-42331, centers on a use-after-free error