CVE-2025-64695

CVE-2025-64695 affects LogStare Collector (Windows installer) with an Uncontrolled search path element (CWE-427) that can allow arbitrary code execution with the invoking user’s privileges. The Red Hat/NVD/JVN entries confirm this as a local issue in the Windows installer; the risk is described a...

EUVD-2025-198417

Uncontrolled search path element issue exists in the installer of LogStare Collector for Windows. If exploited, arbitrary code may be executed with the privilege of the user invoking the installer...

CVE-2025-64299

Vulnerability summary (CVE-2025-64299) : LogStare Collector improperly handles password hash data, allowing an administrative user to obtain other users’ password hashes. Affected product: LogStare Collector. Impact: disclosure of password hashes (confidentiality issue); no exploitation details a...

CVE-2025-64299

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes...

EUVD-2025-198424

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes...

CVE-2025-64299

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes...

CVE-2025-62687

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed...

EUVD-2025-198428

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed...

CVE-2025-62687

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed...

CVE-2025-62687

CVE-2025-62687 affects LogStare Collector. The CSRF vulnerability allows unintended operations when a logged-in user views a crafted page. Exploitation would require user interaction. Remediation per connected docs: update to LogStare Collector 2.4.2 (Windows/Linux) or apply vendor guidance; no e...

CVE-2025-62189

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request...

CVE-2025-62189

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request...

CVE-2025-62189

Summary: CVE-2025-62189 affects LogStare Collector, with an incorrect authorization in the UserRegistration component that could allow a non-administrative user to create new accounts via a crafted HTTP request. The issue is corroborated across multiple sources (NVD, Red Hat, JVN, CVE listings). ...

EUVD-2025-198420

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request...

CVE-2025-61949

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page...

CVE-2025-61949

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page...

CVE-2025-61949

LogStare Collector is affected by CVE-2025-61949, a stored cross-site scripting vulnerability in the UserManagement component. The issue allows an arbitrary script to run in the browser of users who log in to the management page when crafted user information is stored. Documents confirm the affec...

EUVD-2025-198427

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page...

CVE-2025-58097

CVE-2025-58097 concerns LogStare Collector where the installation directory has incorrect access permissions. The issue allows a non-administrative user to manipulate files in the installation path and execution of arbitrary code with administrative privileges (local attack). The CVSS metrics ind...

CVE-2025-58097

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege...