Known Vulnerabilities for products from Xorux
Listed below are 6 of the newest known vulnerabilities associated with the vendor "Xorux".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-42372 json | A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated rem... | 8.8 - HIGH | 2021-11-08 | 2022-09-03 |
| CVE-2021-42371 json | lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30. | 9.8 - CRITICAL | 2021-11-08 | 2022-09-03 |
| CVE-2021-42370 json | A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present... | 7.5 - HIGH | 2021-11-08 | 2022-07-29 |
| CVE-2020-24032 json | tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters ... | 9.8 - CRITICAL | 2020-08-18 | 2022-12-06 |
| CVE-2014-4982 json | LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server. | 9.8 - CRITICAL | 2020-01-10 | 2023-11-07 |
| CVE-2014-4981 json | LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of t... | 9.8 - CRITICAL | 2020-02-17 | 2020-02-20 |
Known software with vulnerabilities from Xorux
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Xorux | Lpar2rrd | 3.02 |