Xorux kayıtları
xorux üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %18,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-648 Incorrect Use of Privileged APIs4
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-24 Path Traversal: '../filedir'1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-922 Insecure Storage of Sensitive Information1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2014-4981İstismar yok | LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI paraxorux · lpar2rrd · CWE-78 | Kritik9,8 | — | %6,1 | 17 Şub 2020 |
41Planlayın | CVE-2020-24032Kavram kanıtı | tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.xorux · lpar2rrd · CWE-78 | Kritik9,8 | — | %5,3 | 18 Ağu 2020 |
40Planlayın | CVE-2014-4982İstismar yok | LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server.xorux · lpar2rrd · CWE-77 | Kritik9,8 | — | %4,5 | 10 Oca 2020 |
39İzleyin | CVE-2021-42371İstismar yok | lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.xorux · lpar2rrd · CWE-922 | Kritik9,8 | — | %1,5 | 8 Kas 2021 |
37İzleyin | CVE-2021-42372İstismar yok | A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers txorux · lpar2rrd · CWE-78 | Yüksek8,8 | — | %6,0 | 8 Kas 2021 |
36İzleyin | CVE-2025-54769Kavram kanıtı | KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversalxorux · lpar2rrd · CWE-24 | Yüksek8,8 | — | %3,5 | 28 Tem 2025 |
30İzleyin | CVE-2021-42370İstismar yok | A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML passwoxorux · lpar2rrd · CWE-312 | Yüksek7,5 | — | %0,7 | 8 Kas 2021 |
29İzleyin | CVE-2025-54767İstismar yok | KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Servicexorux · lpar2rrd · CWE-648 | Orta6,5 | — | %8,5 | 28 Tem 2025 |
24İzleyin | CVE-2025-54765İstismar yok | KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administratorxorux · xormon · CWE-648 | Orta5,3 | — | %10,2 | 28 Tem 2025 |
24İzleyin | CVE-2025-54766İstismar yok | KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Informationxorux · xormon · CWE-648 | Orta5,3 | — | %10,2 | 28 Tem 2025 |
23İzleyin | CVE-2025-54768İstismar yok | KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Informationxorux · lpar2rrd · CWE-648 | Orta5,3 | — | %5,9 | 28 Tem 2025 |
- CVE-2014-498141Planlayın
LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI para
KritikCVSS 9,8İstismar yokEPSS %6xorux · lpar2rrd17 Şub 2020
- CVE-2020-2403241Planlayın
tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone.
KritikCVSS 9,8Kavram kanıtıEPSS %5xorux · lpar2rrd18 Ağu 2020
- CVE-2014-498240Planlayın
LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on the application server.
KritikCVSS 9,8İstismar yokEPSS %4xorux · lpar2rrd10 Oca 2020
- CVE-2021-4237139İzleyin
lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30.
KritikCVSS 9,8İstismar yokEPSS %1xorux · lpar2rrd8 Kas 2021
- CVE-2021-4237237İzleyin
A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers t
YüksekCVSS 8,8İstismar yokEPSS %6xorux · lpar2rrd8 Kas 2021
- CVE-2025-5476936İzleyin
KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal
YüksekCVSS 8,8Kavram kanıtıEPSS %3xorux · lpar2rrd28 Tem 2025
- CVE-2021-4237030İzleyin
A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML passwo
YüksekCVSS 7,5İstismar yokEPSS %0xorux · lpar2rrd8 Kas 2021
- CVE-2025-5476729İzleyin
KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service
OrtaCVSS 6,5İstismar yokEPSS %8xorux · lpar2rrd28 Tem 2025
- CVE-2025-5476524İzleyin
KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator
OrtaCVSS 5,3İstismar yokEPSS %10xorux · xormon28 Tem 2025
- CVE-2025-5476624İzleyin
KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information
OrtaCVSS 5,3İstismar yokEPSS %10xorux · xormon28 Tem 2025
- CVE-2025-5476823İzleyin
KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information
OrtaCVSS 5,3İstismar yokEPSS %5xorux · lpar2rrd28 Tem 2025