CVE-2014-4981

LPAR2RRD in 3.5 and earlier allows remote attackers to execute arbitrary commands due to insufficient input sanitization of the web GUI parameters.

• CWE-78

• http://ocert.org/advisories/ocert-2014-005.htmlThird Party Advisory
• http://packetstormsecurity.com/files/127593/LPAR2RRD-3.5-4.53-Command-Injection.htmlThird Party Advisory, VDB Entry
• http://www.lpar2rrd.com/note453-01.htmVendor Advisory
• http://www.openwall.com/lists/oss-security/2014/07/23/6Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/68844Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94784Third Party Advisory, VDB Entry
• http://ocert.org/advisories/ocert-2014-005.htmlThird Party Advisory
• http://packetstormsecurity.com/files/127593/LPAR2RRD-3.5-4.53-Command-Injection.htmlThird Party Advisory, VDB Entry
• http://www.lpar2rrd.com/note453-01.htmVendor Advisory
• http://www.openwall.com/lists/oss-security/2014/07/23/6Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/68844Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/94784Third Party Advisory, VDB Entry

Published

Feb 17, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-4975Off-by-one error in the encodes function in pack.c in Ruby 1…
• CVE-2014-4976Dell SonicWall Scrutinizer 11.0.1 allows remote authenticate…
• CVE-2014-4977Multiple SQL injection vulnerabilities in Dell SonicWall Scr…
• CVE-2014-4978The rs_filter_graph function in librawstudio/rs-filter.c in …
• CVE-2014-4979Apple QuickTime allows remote attackers to execute arbitrary…
• CVE-2014-4980The /server/properties resource in Tenable Web UI before 2.3…
• CVE-2014-4982LPAR2RRD ≤ 4.53 and ≤ 3.5 has arbitrary command injection on…9.8
• CVE-2014-4984Déjà Vu Crescendo Sales CRM has remote SQL Injection9.8
• CVE-2014-4986Multiple cross-site scripting (XSS) vulnerabilities in js/fu…
• CVE-2014-4987server_user_groups.php in phpMyAdmin 4.1.x before 4.1.14.2 a…
• CVE-2014-4991(1) lib/dataset/database/mysql.rb and (2) lib/dataset/databa…
• CVE-2014-4992lib/cap-strap/helpers.rb in the cap-strap gem 0.1.5 for Ruby…