EL
Product
ELOG
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 0Low 0
Watch
Add ELOG to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-64349 | 8.8 | Oct 31 | ELOG user profile missing authorization Affected: All versions, or not specified |
| CVE-2025-62618 | 8.0 | Oct 31 | ELOG file upload stored XSS Affected: before 3.1.5-20251014 |
| CVE-2025-64348 | 7.1 | Oct 31 | ELOG configuration file authorization bypass Affected: All versions, or not specified |
| CVE-2008-7004 | – | Aug 19 | Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c Affected: through 2.7.0; 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +34 more |
| CVE-2008-0444 | – | Jan 25 | Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to… Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +34 more |
| CVE-2008-0445 | – | Jan 25 | The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries Affected: 1.0.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; 1.0.5; +34 more |
Showing 6