EL
Product
Elog
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 8Medium 1Low 0
Watch
Add Elog to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-64349 | 8.8 | Oct 31 | ELOG user profile missing authorization Affected: through 3.1.5-20251014 |
| CVE-2025-62618 | 8.0 | Oct 31 | ELOG file upload stored XSS Affected: before 3.1.5-20251014 |
| CVE-2019-3995 | 7.5 | Dec 17 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference Affected: through 3.1.4-57bea22 |
| CVE-2019-3994 | 7.5 | Dec 17 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free Affected: through 3.1.4-57bea22 |
| CVE-2019-3993 | 7.5 | Dec 17 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability Affected: through 3.1.4-57bea22 |
| CVE-2019-3992 | 7.5 | Dec 17 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability Affected: through 3.1.4-57bea22 |
| CVE-2016-6342 | 7.5 | Jun 27 | elog 3.1.1 allows remote attackers to post data as any username in the logbook Affected: 3.1.1 |
| CVE-2025-64348 | 7.1 | Oct 31 | ELOG configuration file authorization bypass Affected: through 3.1.5-20251014 |
| CVE-2019-3996 | 6.5 | Dec 17 | ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests Affected: through 3.1.4-57bea22 |
Showing 9