XO
Vendor
Xorux
17
CVEs
0
On KEV
0
New 30D
Products
LP9.8
LPAR2RRD
Xorux
9 CVEs0 on KEV0 new
ST9.8
Stor2rrd
Xorux
4 CVEs0 on KEV0 new
XO5.3
Xormon
Xorux
2 CVEs0 on KEV0 new
XO5.3
XorMon-NG
Xorux
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-54769 | LP LPAR2RRD Xorux | 8.8 | Jul 28 | KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal |
| CVE-2025-54768 | LP LPAR2RRD Xorux | 5.3 | Jul 28 | KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information |
| CVE-2025-54767 | LP LPAR2RRD Xorux | 6.5 | Jul 28 | KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service |
| CVE-2025-54765 | XO XorMon-NG Xorux | 5.3 | Jul 28 | KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator |
| CVE-2025-54766 | XO XorMon-NG Xorux | 5.3 | Jul 28 | KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information |
| CVE-2021-42372 | LP Lpar2rrd Xorux | 8.8 | Nov 8 | A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as… |
| CVE-2021-42371 | LP Lpar2rrd Xorux | 9.8 | Nov 8 | lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30 |
| CVE-2021-42370 | ST Stor2rrd Xorux | 7.5 | Nov 8 | A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device… |
| CVE-2020-24032 | ST Stor2rrd Xorux | 9.8 | Aug 18 | tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone |
| CVE-2014-4981 | LP Lpar2rrd Xorux | 9.8 | Feb 17 | LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters |
| CVE-2014-4982 | LP Lpar2rrd Xorux | 9.8 | Jan 10 | LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server |