Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2632▼ 455 respecto a la semana anterior
Críticas / altas1285▼ 65 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)235▼ 275 respecto a la semana anterior
5 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 6.1% | — | Xorux Lpar2rrdXorux Stor2rrd | 8/11/2021 | 17/6/2026 | A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7.30 allows authenticated remote attackers to execute arbitrary shell commands as the user running the service. | |
| Modificada | Crítica (9.8) | 1.6% | — | Xorux Lpar2rrdXorux Stor2rrd | 8/11/2021 | 17/6/2026 | lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30. | |
| Modificada | Alta (7.5) | 0.72% | — | Xorux Lpar2rrdXorux Stor2rrd | 8/11/2021 | 17/6/2026 | A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because cleartext information is present in HTML password input fields in the device properties. (Viewing the passwords requires configuring a web browser to display HTML password input fields.) | |
| Modificada | Crítica (9.8) | 5.4% | — | Xorux Lpar2rrdXorux Stor2rrd | 18/8/2020 | 17/6/2026 | tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command injection via shell metacharacters in a timezone. | |
| Modificada | Alta (7.2) | 2.0% | — | Xorur Lpar2rrdXorur Stor2rrd | 17/11/2019 | 17/6/2026 | An issue was discovered in Xorux Lpar2RRD 6.11 and Stor2RRD 2.61, as distributed in Xorux 2.41. They do not correctly verify the integrity of an upgrade package before processing it. As a result, official upgrade packages can be modified to inject an arbitrary Bash script that will be executed by the underlying… |