Xorux vulnerabilities

Products

• Lpar2rrd 9
• Stor2rrd 4
• Xormon 2
• Xormon-ng 2

Newest

• xorux lpar2rrd KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal CVE-2025-54769 Public exploit 8.8 HighJuly 28, 2025
• xorux lpar2rrd KL-001-2025-015: Xorux LPAR2RRD Read Only User Log Download Exposing Sensitive Information CVE-2025-54768 5.3 MediumJuly 28, 2025
• xorux lpar2rrd KL-001-2025-014: Xorux LPAR2RRD Read Only User Denial of Service CVE-2025-54767 6.5 MediumJuly 28, 2025
• xorux xormon, xormon-ng +1 more KL-001-2025-013: Xorux XorMon-NG Web Application Privilege Escalation to Administrator CVE-2025-54765 EPSS 10.2% 5.3 MediumJuly 28, 2025
• xorux xormon, xormon-ng +1 more KL-001-2025-012: Xorux XorMon-NG Read Only User Export Device Configuration Exposing Sensitive Information CVE-2025-54766 EPSS 10.2% 5.3 MediumJuly 28, 2025
• xorux lpar2rrd, stor2rrd +1 more A password mismanagement situation exists in XoruX LPAR2RRD and STOR2RRD before 7.30 because... CVE-2021-42370 7.5 HighNovember 8, 2021
• xorux lpar2rrd, stor2rrd +1 more lpar2rrd is a hardcoded system account in XoruX LPAR2RRD and STOR2RRD before 7.30. CVE-2021-42371 9.8 CriticalNovember 8, 2021
• xorux lpar2rrd, stor2rrd +1 more A shell command injection in the HW Events SNMP community in XoruX LPAR2RRD and STOR2RRD before 7... CVE-2021-42372 8.8 HighNovember 8, 2021
• xorux lpar2rrd, stor2rrd +1 more tz.pl on XoruX LPAR2RRD and STOR2RRD 2.70 virtual appliances allows cmd=set&tz=OS command... CVE-2020-24032 Public exploit 9.8 CriticalAugust 18, 2020
• xorux lpar2rrd LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to... CVE-2014-4981 9.8 CriticalFebruary 17, 2020
• xorux lpar2rrd LPAR2RRD ? 4.53 and ? 3.5 has arbitrary command injection on the application server. CVE-2014-4982 9.8 CriticalJanuary 10, 2020