Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2021-42372
Disclosure Date: November 08, 2021 (last updated February 23, 2025)
A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service.
0
Attacker Value
Unknown
CVE-2021-42370
Disclosure Date: November 08, 2021 (last updated February 23, 2025)
A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.)
0
Attacker Value
Unknown
CVE-2021-42371
Disclosure Date: November 08, 2021 (last updated February 23, 2025)
lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
0
Attacker Value
Unknown
CVE-2020-24032
Disclosure Date: August 18, 2020 (last updated February 22, 2025)
tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
0
Attacker Value
Unknown
CVE-2014-4981
Disclosure Date: February 17, 2020 (last updated February 21, 2025)
LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters.
0
Attacker Value
Unknown
CVE-2014-4982
Disclosure Date: January 10, 2020 (last updated February 21, 2025)
LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server.
0
