Skip to content
Noroxi

lm21 records

4 published records for vendor lm21.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 23
  2. 24
  3. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2025-29449
    26Monitor

    An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function.

    MediumCVSS 6.5No exploitEPSS 0%

    lm21 · twonavApr 17, 2025

  • CVE-2025-29450
    26Monitor

    An issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component.

    MediumCVSS 6.5No exploitEPSS 0%

    lm21 · twonavApr 17, 2025

  • CVE-2023-37657
    21Monitor

    TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS).

    MediumCVSS 5.4No exploitEPSS 0%

    lm21 · twonavJul 11, 2023

  • CVE-2024-34453
    17Monitor

    TwoNav 2.1.13 contains an SSRF vulnerability via the url paramater to index.php?c=api&method=read_data&type=connectivity_test (which reaches

    MediumCVSS 4.3No exploitEPSS 0%

    May 3, 2024