Vendors / ELOG Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2
CVSS high 4
Exploited now ELOG records in CISA KEV No ELOG vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c.
CVSS 2.0 HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01678 · Published 2009-08-19 · No fix listed CWE-119
Priority MEDIUM 43
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter.
CVSS 2.0 HIGH 7.8· Network · No auth · Interaction — · EPSS 0.06129 · Published 2005-12-21 · No fix listed
Priority MEDIUM 40
ELOG allows an authenticated user to modify another user's profile.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00375 · Published 2025-10-31 · No fix listed CWE-862
Priority MEDIUM 40
ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service.
CVSS 4.0 CRITICAL 9.3· Network · Low privileges · No interaction · EPSS 0.00321 · Published 2025-10-31 · No fix listed CWE-862
Priority LOW 39
ELOG allows an authenticated user to upload arbitrary HTML files.
CVSS 4.0 HIGH 8.6· Network · Low privileges · User interaction · EPSS 0.00319 · Published 2025-10-31 · Fixed in 3.1.5-20251014 CWE-434
Priority LOW 39
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.03573 · Published 2020-03-23 · No fix listed CWE-476
Priority LOW 26
The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01428 · Published 2008-01-24 · No fix listed
Priority LOW 23
Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components.
CVSS 2.0 MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0125 · Published 2008-01-24 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
2 4 2 0 0
THREATIST.IORead the docs