Elog

8 CVEs across 3 Elog products. Browse Elog vulnerabilities, severities, and proof-of-concept exploits.

Elog products with known CVEs

ProductCVEs
Elog6
Electronic Logbook1
Elogd1
Elog CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-64349High8.82025-10-31ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take…
CVE-2025-64348High7.12025-10-31ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enable…
CVE-2025-62618High8.02025-10-31ELOG allows an authenticated user to upload arbitrary HTML files. The HTML content is executed in the context of other users when they open the file. Because E…
CVE-2020-8859High7.52020-03-23This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of ELOG Electronic Logbook 3.1.4-283534d. Authenti…
CVE-2008-70042009-08-19Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c.
CVE-2008-04452008-01-25The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via cra…
CVE-2008-04442008-01-25Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or HTML via subtext p…
CVE-2005-44392005-12-21Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a UR…