Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2021-42372

A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.

CVSS 3.1 · 8.8 High EPSS 6.1% KEV · Not listed
Vendors
Xorux
Products
Lpar2rrd Stor2rrd
CVE-2021-42370

A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.)

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Xorux
Products
Lpar2rrd Stor2rrd
CVE-2020-24032

tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.

CVSS 3.1 · 9.8 Critical EPSS 5.4% KEV · Not listed
Vendors
Xorux
Products
Lpar2rrd Stor2rrd