CVE-2025-61949

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page...

CVE-2025-58097

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege...

CVE-2025-58097

CVE-2025-58097 concerns LogStare Collector where the installation directory has incorrect access permissions. The issue allows a non-administrative user to manipulate files in the installation path and execution of arbitrary code with administrative privileges (local attack). The CVSS metrics ind...

CVE-2025-58097

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege...

EUVD-2025-198423

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege...

PT-2025-47671

Uncontrolled search path element issue exists in the installer of LogStare Collector for Windows. If exploited, arbitrary code may be executed with the privilege of the user invoking the installer...

LogStare Collector 安全漏洞

LogStare Collector is a data collector from LogStare Japan. A security vulnerability exists in LogStare Collector that stems from an improperly configured installation directory permissions, which could lead to the execution of arbitrary code by a non-administrative user...

PT-2025-47669

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed...

WordPress plugin 简数采集器 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

LogStare Collector 跨站脚本漏洞

LogStare Collector is a data collector from LogStare Japan. A cross-site scripting vulnerability exists in LogStare Collector that stems from the presence of stored cross-site scripting in UserManagement, which could lead to arbitrary script execution...

LogStare Collector 代码问题漏洞

LogStare Collector is a data collector from LogStare Japan. A code issue vulnerability exists in LogStare Collector that stems from an improperly controlled installer path that could lead to the execution of arbitrary code...

LogStare Collector 跨站请求伪造漏洞

LogStare Collector is a data collector from LogStare Japan. LogStare Collector suffers from a cross-site request forgery vulnerability that stems from cross-site request forgery and could lead to unauthorized operations...

LogStare Collector 安全漏洞

LogStare Collector is a data collector from LogStare Japan. A security vulnerability exists in LogStare Collector that stems from improper authorization in UserRegistration, which could result in a non-administrative user creating a new account...

LogStare Collector 安全漏洞

LogStare Collector is a data collector from LogStare Japan. A security vulnerability exists in LogStare Collector that stems from improper handling of password hash data, which could lead to password hash disclosure...

PT-2025-47668

Name of the Vulnerable Software and Affected Versions LogStare Collector affected versions not specified Description LogStare Collector has an authorization issue within the UserRegistration component. A user without administrative privileges can create new user accounts by submitting a specially...

PT-2025-47670

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, opentelemetry-collector-contrib, sqlexporter, bento, argo-events, cluster-api-aws-controller, amazon-cloudwatch-agent, telegraf, grafana-alloy, dapr, splunk-otel-collector...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: jitsucom-bulker, opentelemetry-collector-contrib, sqlexporter, bento, argo-events, cluster-api-aws-controller, amazon-cloudwatch-agent, telegraf, grafana-alloy, dapr, splunk-otel-collector...

CVE-2025-63811 vulnerabilities

Vulnerabilities for packages: telegraf, sqlexporter-fips, dapr-fips, splunk-otel-collector-fips, dapr, grafana-alloy, argo-events, argo-events-fips, cluster-api-aws-controller-fips, amazon-cloudwatch-agent-fips, vault, jitsucom-bulker, sqlexporter, cluster-api-aws-controller, vault-fips,...

GHSA-9MJ6-HXHV-W67J vulnerabilities

Vulnerabilities for packages: telegraf, sqlexporter-fips, dapr-fips, splunk-otel-collector-fips, dapr, grafana-alloy, argo-events, argo-events-fips, cluster-api-aws-controller-fips, amazon-cloudwatch-agent-fips, vault, jitsucom-bulker, sqlexporter, cluster-api-aws-controller, vault-fips,...