Vulnerabilities

TI-2020-07113 CVE-2020-8859 · GHSA-gxx3-g5rx-565f

NULL pointer dereference in ELOG Electronic Logbook

LOW 39

This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03573 Published 2020-03-23 No fix listed CWE-476

TI-2019-14610 CVE-2019-20375 · GHSA-7q42-98q6-h3r9

A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows…

LOW 29

A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows remote attackers to inject arbitrary web script or HTML via the value parameter in a localization (loc) command to elogd.c.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00785 Published 2020-01-10 No fix listed CWE-79

TI-2019-14611 CVE-2019-20376 · GHSA-6fqj-34c5-f3m3

A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows…

LOW 29

A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows remote attackers to inject arbitrary web script or HTML via a crafted SVG document to elogd.c.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00785 Published 2020-01-10 No fix listed CWE-79

Vulnerabilities

Filters

NULL pointer dereference in ELOG Electronic Logbook

A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows…

A cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) 3.1.4 allows…