ELOG records
4 published records for vendor elog.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 25%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
41Plan | CVE-2008-7004No exploit | Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c.elog · elog · CWE-119 | Critical10.0 | — | 1.6% | Aug 19, 2009 |
33Monitor | CVE-2005-4439No exploit | Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbielog · elogd | High7.8 | — | 6.1% | Dec 20, 2005 |
20Monitor | CVE-2008-0445No exploit | The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infelog · elog | Medium5.0 | — | 1.4% | Jan 24, 2008 |
17Monitor | CVE-2008-0444No exploit | Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script orelog · elog · CWE-79 | Medium4.3 | — | 1.2% | Jan 24, 2008 |
- CVE-2008-700441Plan
Buffer overflow in Electronic Logbook (ELOG) before 2.7.1 has unknown impact and attack vectors, possibly related to elog.c.
CriticalCVSS 10.0No exploitEPSS 1%elog · elogAug 19, 2009
- CVE-2005-443933Monitor
Buffer overflow in ELOG elogd 2.6.0-beta4 allows remote attackers to cause a denial of service (application crash) and possibly execute arbi
HighCVSS 7.8No exploitEPSS 6%elog · elogdDec 20, 2005
- CVE-2008-044520Monitor
The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (inf
MediumCVSS 5.0No exploitEPSS 1%elog · elogJan 24, 2008
- CVE-2008-044417Monitor
Cross-site scripting (XSS) vulnerability in Electronic Logbook (ELOG) before 2.7.0 allows remote attackers to inject arbitrary web script or
MediumCVSS 4.3No exploitEPSS 1%elog · elogJan 24, 2008