Elog
8 CVEs across 3 Elog products. Browse Elog vulnerabilities, severities, and proof-of-concept exploits.
Elog products with known CVEs
Elog CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-64349 | High | 8.8 | 2025-10-31 | ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take… |
CVE-2025-64348 | High | 7.1 | 2025-10-31 | ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enable… |
CVE-2025-62618 | High | 8.0 | 2025-10-31 | ELOG allows an authenticated user to upload arbitrary HTML files. The HTML content is executed in the context of other users when they open the file. Because E… |
CVE-2020-8859 | High | 7.5 | 2020-03-23 | This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d. Authenti… |
CVE-2008-7004 | | | 2009-08-19 | Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c. |
CVE-2008-0445 | | | 2008-01-25 | The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via cra… |
CVE-2008-0444 | | | 2008-01-25 | Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext p… |
CVE-2005-4439 | | | 2005-12-21 | Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a UR… |