TI-2025-39782 CVE-2025-64349 · GHSA-jvj5-h296-c727
ELOG user profile missing authorization
Priority MEDIUM 40
ELOG allows an authenticated user to modify another user's profile.
Vulnerabilities
8 records
TI-2025-39781 CVE-2025-64348 · GHSA-3p95-q82m-f2fv
ELOG configuration file authorization bypass
Priority MEDIUM 40
ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service.
TI-2025-38833 CVE-2025-62618 · GHSA-9wg9-fwv6-cgcr
ELOG file upload stored XSS
Priority LOW 39
ELOG allows an authenticated user to upload arbitrary HTML files.
TI-2020-07113 CVE-2020-8859 · GHSA-gxx3-g5rx-565f
NULL pointer dereference in ELOG Electronic Logbook
Priority LOW 39
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d.
TI-2008-06692 CVE-2008-7004 · GHSA-5c5j-j5xj-c3ww
Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack…
Priority MEDIUM 46
Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c.
TI-2008-00420 CVE-2008-0445 · GHSA-g6jx-3h74-6fm8
The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows…
Priority LOW 26
The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries.
TI-2008-00419 CVE-2008-0444 · GHSA-p383-332q-77v5
Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows…
Priority LOW 23
Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext parameter to unspecified components.
TI-2005-04182 CVE-2005-4439 · GHSA-35q7-q9hg-r69q
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of…
Priority MEDIUM 43
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a URL with a long (1) cmd or (2) mode parameter.