secuavail records

6 published records for vendor secuavail.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2025-64695No exploit	Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows).secuavail · logstare collector · CWE-427 RCE Local privilege escalation	High8.4	—	0.1%	Nov 21, 2025
27Monitor	CVE-2025-64299No exploit	LogStare Collector improperly handles the password hash data.secuavail · logstare collector · CWE-201	Medium6.9	—	0.2%	Nov 21, 2025
27Monitor	CVE-2025-62687No exploit	Cross-site request forgery vulnerability exists in LogStare Collector.secuavail · logstare collector · CWE-352 Pre-auth CSRF	Medium6.9	—	0.1%	Nov 21, 2025
27Monitor	CVE-2025-58097No exploit	The installation directory of LogStare Collector is configured with incorrect access permissions.secuavail · logstare collector · CWE-276 RCE Local privilege escalation	Medium6.8	—	0.1%	Nov 21, 2025
21Monitor	CVE-2025-62189No exploit	LogStare Collector contains an incorrect authorization vulnerability in UserRegistration.secuavail · logstare collector · CWE-863 Broken access control (IDOR)	Medium5.3	—	0.2%	Nov 21, 2025
19Monitor	CVE-2025-61949No exploit	LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement.secuavail · logstare collector · CWE-79 XSS	Medium4.8	—	0.1%	Nov 21, 2025

CVE-2025-64695
33Monitor
Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows).
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Local privilege escalation
secuavail · logstare collectorNov 21, 2025
CVE-2025-64299
27Monitor
LogStare Collector improperly handles the password hash data.
MediumCVSS 6.9No exploitEPSS 0%
secuavail · logstare collectorNov 21, 2025
CVE-2025-62687
27Monitor
Cross-site request forgery vulnerability exists in LogStare Collector.
MediumCVSS 6.9No exploitEPSS 0%
- Pre-auth
- CSRF
secuavail · logstare collectorNov 21, 2025
CVE-2025-58097
27Monitor
The installation directory of LogStare Collector is configured with incorrect access permissions.
MediumCVSS 6.8No exploitEPSS 0%
- RCE
- Local privilege escalation
secuavail · logstare collectorNov 21, 2025
CVE-2025-62189
21Monitor
LogStare Collector contains an incorrect authorization vulnerability in UserRegistration.
MediumCVSS 5.3No exploitEPSS 0%
- Broken access control (IDOR)
secuavail · logstare collectorNov 21, 2025
CVE-2025-61949
19Monitor
LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement.
MediumCVSS 4.8No exploitEPSS 0%
- XSS
secuavail · logstare collectorNov 21, 2025