EP
Vendor
Elog Project
9
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-64349 | EL Elog Elog Project | 8.8 | Oct 31 | ELOG user profile missing authorization |
| CVE-2025-64348 | EL Elog Elog Project | 7.1 | Oct 31 | ELOG configuration file authorization bypass |
| CVE-2025-62618 | EL Elog Elog Project | 8.0 | Oct 31 | ELOG file upload stored XSS |
| CVE-2019-3996 | EL Elog Elog Project | 6.5 | Dec 17 | ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests |
| CVE-2019-3995 | EL Elog Elog Project | 7.5 | Dec 17 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference |
| CVE-2019-3994 | EL Elog Elog Project | 7.5 | Dec 17 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free |
| CVE-2019-3993 | EL Elog Elog Project | 7.5 | Dec 17 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability |
| CVE-2019-3992 | EL Elog Elog Project | 7.5 | Dec 17 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability |
| CVE-2016-6342 | EL Elog Elog Project | 7.5 | Jun 27 | elog 3.1.1 allows remote attackers to post data as any username in the logbook |