zrlog kayıtları
zrlog üreticisine ait 12 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-434 Unrestricted Upload of File with Dangerous Type2
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-863 Incorrect Authorization1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-918 Server-Side Request Forgery (SSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
12 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-44093İstismar yok | A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, uzrlog · zrlog · CWE-434 | Kritik9,8 | — | %2,6 | 28 Kas 2021 |
39İzleyin | CVE-2025-45872İstismar yok | zrlog v3.1.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the downloadUrl parameter.zrlog · zrlog · CWE-918 | Kritik9,8 | — | %0,5 | 1 Tem 2025 |
36İzleyin | CVE-2020-27514İstismar yok | Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delzrlog · zrlog · CWE-22 | Kritik9,1 | — | %1,4 | 11 Ağu 2023 |
31İzleyin | CVE-2021-44094İstismar yok | ZrLog 2.2.2 has a remote command execution vulnerability at plugin download function, it could execute any JAR filezrlog · zrlog · CWE-434 | Yüksek7,8 | — | %1,4 | 28 Kas 2021 |
28İzleyin | CVE-2018-17420İstismar yok | An issue was discovered in ZrLog 2.0.3.zrlog · zrlog · CWE-89 | Yüksek7,2 | — | %1,3 | 7 Mar 2019 |
24İzleyin | CVE-2020-21316İstismar yok | A Cross-site scripting (XSS) vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary wzrlog · zrlog · CWE-79 | Orta6,1 | — | %1,1 | 15 Haz 2021 |
24İzleyin | CVE-2018-17421İstismar yok | An issue was discovered in ZrLog 2.0.3.zrlog · zrlog · CWE-79 | Orta6,1 | — | %0,9 | 7 Mar 2019 |
24İzleyin | CVE-2018-17079İstismar yok | An issue was discovered in ZRLOG 2.0.1.zrlog · zrlog · CWE-79 | Orta6,1 | — | %0,8 | 19 Haz 2019 |
24İzleyin | CVE-2020-18066İstismar yok | Cross Site Scripting vulnerability in ZrLog 2.1.0 via the (1) userName and (2) email parameters in post/addComment.zrlog · zrlog · CWE-79 | Orta6,1 | — | %0,6 | 29 Haz 2021 |
24İzleyin | CVE-2020-21052İstismar yok | Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of thzrlog · zrlog · CWE-79 | Orta6,1 | — | %0,6 | 20 Haz 2023 |
22İzleyin | CVE-2020-19005İstismar yok | zrlog v2.1.0 has a vulnerability with the permission check.zrlog · zrlog · CWE-863 | Orta5,7 | — | %0,7 | 25 Ağu 2020 |
21İzleyin | CVE-2019-16643İstismar yok | An issue was discovered in ZrLog 2.1.1.zrlog · zrlog · CWE-79 | Orta5,4 | — | %0,6 | 20 Eyl 2019 |
- CVE-2021-4409340Planlayın
A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, u
KritikCVSS 9,8İstismar yokEPSS %3zrlog · zrlog28 Kas 2021
- CVE-2025-4587239İzleyin
zrlog v3.1.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the downloadUrl parameter.
KritikCVSS 9,8İstismar yokEPSS %0zrlog · zrlog1 Tem 2025
- CVE-2020-2751436İzleyin
Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to del
KritikCVSS 9,1İstismar yokEPSS %1zrlog · zrlog11 Ağu 2023
- CVE-2021-4409431İzleyin
ZrLog 2.2.2 has a remote command execution vulnerability at plugin download function, it could execute any JAR file
YüksekCVSS 7,8İstismar yokEPSS %1zrlog · zrlog28 Kas 2021
- CVE-2018-1742028İzleyin
An issue was discovered in ZrLog 2.0.3.
YüksekCVSS 7,2İstismar yokEPSS %1zrlog · zrlog7 Mar 2019
- CVE-2020-2131624İzleyin
A Cross-site scripting (XSS) vulnerability exists in the comment section in ZrLog 2.1.3, which allows remote attackers to inject arbitrary w
OrtaCVSS 6,1İstismar yokEPSS %1zrlog · zrlog15 Haz 2021
- CVE-2018-1742124İzleyin
An issue was discovered in ZrLog 2.0.3.
OrtaCVSS 6,1İstismar yokEPSS %1zrlog · zrlog7 Mar 2019
- CVE-2018-1707924İzleyin
An issue was discovered in ZRLOG 2.0.1.
OrtaCVSS 6,1İstismar yokEPSS %1zrlog · zrlog19 Haz 2019
- CVE-2020-1806624İzleyin
Cross Site Scripting vulnerability in ZrLog 2.1.0 via the (1) userName and (2) email parameters in post/addComment.
OrtaCVSS 6,1İstismar yokEPSS %1zrlog · zrlog29 Haz 2021
- CVE-2020-2105224İzleyin
Cross Site Scripting vulnerability in zrlog zrlog v.2.1.3 allows a remote attacker to execute arbitrary code via the nickame parameter of th
OrtaCVSS 6,1İstismar yokEPSS %1zrlog · zrlog20 Haz 2023
- CVE-2020-1900522İzleyin
zrlog v2.1.0 has a vulnerability with the permission check.
OrtaCVSS 5,7İstismar yokEPSS %1zrlog · zrlog25 Ağu 2020
- CVE-2019-1664321İzleyin
An issue was discovered in ZrLog 2.1.1.
OrtaCVSS 5,4İstismar yokEPSS %1zrlog · zrlog20 Eyl 2019