TI-2025-39782 CVE-2025-64349 · GHSA-jvj5-h296-c727
ELOG user profile missing authorization
Priority MEDIUM 40
ELOG allows an authenticated user to modify another user's profile.
Vulnerabilities
9 records
TI-2025-39781 CVE-2025-64348 · GHSA-3p95-q82m-f2fv
ELOG configuration file authorization bypass
Priority MEDIUM 40
ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service.
TI-2025-38833 CVE-2025-62618 · GHSA-9wg9-fwv6-cgcr
ELOG file upload stored XSS
Priority LOW 39
ELOG allows an authenticated user to upload arbitrary HTML files.
TI-2019-03000 CVE-2019-3996 · GHSA-2g3j-pp7m-869h
ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when…
Priority LOW 38
ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.
TI-2019-02999 CVE-2019-3995 · GHSA-vhqv-qjvq-7xpf
NULL pointer dereference in ELOG
Priority MEDIUM 56
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference.
TI-2019-02998 CVE-2019-3994 · GHSA-8cv3-rqqw-vw5m
Use after free in ELOG
Priority LOW 39
ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free.
TI-2019-02997 CVE-2019-3993 · GHSA-7hmp-m42w-c587
Information disclosure in ELOG
Priority MEDIUM 62
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.
TI-2019-02996 CVE-2019-3992 · GHSA-2378-x22r-cqpj
Information disclosure in ELOG
Priority LOW 35
ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability.
TI-2016-05430 CVE-2016-6342 · GHSA-qfxm-h9jr-5w92
elog 3.1.1 allows remote attackers to post data as any username in the logbook.
Priority LOW 35
elog 3.1.1 allows remote attackers to post data as any username in the logbook.