Elog Project
Elog Project Elog: vulnerabilidades y CVE
Elog Project Elog tiene 9 vulnerabilidades publicadas, 3 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE9
Últimos 12 meses3
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2025-64349 | Alta (8.7) | 0.38% | — | 31 oct 2025 | ELOG allows an authenticated user to modify another user's profile. An attacker can edit a target user's email address, then request a password reset, and take control of the target account. By default, ELOG is not… |
| CVE-2025-64348 | Alta (7.1) | 0.32% | — | 31 oct 2025 | ELOG allows an authenticated user to modify or overwrite the configuration file, resulting in denial of service. If the execute facility is specifically enabled with the "-x" command line flag, attackers could execute… |
| CVE-2025-62618 | Alta (8.6) | 0.32% | — | 31 oct 2025 | ELOG allows an authenticated user to upload arbitrary HTML files. The HTML content is executed in the context of other users when they open the file. Because ELOG includes usernames and password hashes in certain HTTP… |
| CVE-2019-3996 | Media (6.5) | 5.9% | — | 17 dic 2019 | ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests. |
| CVE-2019-3995 | Alta (7.5) | 29% | — | 17 dic 2019 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a NULL pointer dereference. A remote unauthenticated attacker can crash the ELOG server by sending a crafted HTTP GET request. |
| CVE-2019-3994 | Alta (7.5) | 2.9% | — | 17 dic 2019 | ELOG 3.1.4-57bea22 and below is affected by a denial of service vulnerability due to a use after free. A remote unauthenticated attacker can crash the ELOG server by sending multiple HTTP POST requests which causes the… |
| CVE-2019-3993 | Alta (7.5) | 46% | — | 17 dic 2019 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can recover a user's password hash by sending a crafted HTTP POST request. |
| CVE-2019-3992 | Alta (7.5) | 1.3% | — | 17 dic 2019 | ELOG 3.1.4-57bea22 and below is affected by an information disclosure vulnerability. A remote unauthenticated attacker can access the server's configuration file by sending an HTTP GET request. Amongst the configuration… |
| CVE-2016-6342 | Alta (7.5) | 1.0% | — | 27 jun 2017 | elog 3.1.1 allows remote attackers to post data as any username in the logbook. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.