LP
Product
LPAR2RRD
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 3Medium 2Low 0
Watch
Add LPAR2RRD to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-42371 | 9.8 | Nov 8 | lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30 Affected: before 7.30 |
| CVE-2020-24032 | 9.8 | Aug 18 | tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone Affected: 2.7.0 |
| CVE-2014-4981 | 9.8 | Feb 17 | LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters Affected: through 3.50 |
| CVE-2014-4982 | 9.8 | Jan 10 | LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server Affected: through 3.50; 4.00 through 4.53 |
Showing 4
