CVE-2025-58097

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege...

CVE-2025-58097

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege...

LogStare Collector 代码问题漏洞

LogStare Collector is a data collector from LogStare Japan. A code issue vulnerability exists in LogStare Collector that stems from an improperly controlled installer path that could lead to the execution of arbitrary code...

LogStare Collector 安全漏洞

LogStare Collector is a data collector from LogStare Japan. A security vulnerability exists in LogStare Collector that stems from improper handling of password hash data, which could lead to password hash disclosure...

CVE-2025-64695: Uncontrolled Search Path Element

Uncontrolled search path element issue exists in the installer of LogStare Collector for Windows. If exploited, arbitrary code may be executed with the privilege of the user invoking the installer...

CVE-2025-64299: Insertion of Sensitive Information Into Sent Data

LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes...

CVE-2025-58097: Incorrect Default Permissions

The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege...

PT-2025-47670

Name of the Vulnerable Software and Affected Versions LogStare Collector affected versions not specified Description An administrative user may obtain other users' password hashes due to improper handling of password hash data. Recommendations At the moment, there is no information about a newer...

PT-2025-47668

Name of the Vulnerable Software and Affected Versions LogStare Collector affected versions not specified Description LogStare Collector has an authorization issue within the UserRegistration component. A user without administrative privileges can create new user accounts by submitting a specially...

PT-2025-47671

Name of the Vulnerable Software and Affected Versions LogStare Collector affected versions not specified Description An issue exists in the LogStare Collector installer for Windows that involves an uncontrolled search path element. Successful exploitation of this issue could allow for arbitrary...

LogStare Collector 跨站请求伪造漏洞

LogStare Collector is a data collector from LogStare Japan. LogStare Collector suffers from a cross-site request forgery vulnerability that stems from cross-site request forgery and could lead to unauthorized operations...

CVE-2025-62687: Cross-Site Request Forgery (CSRF)

Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed...

LogStare Collector 安全漏洞

LogStare Collector is a data collector from LogStare Japan. A security vulnerability exists in LogStare Collector that stems from an improperly configured installation directory permissions, which could lead to the execution of arbitrary code by a non-administrative user...

LogStare Collector 跨站脚本漏洞

LogStare Collector is a data collector from LogStare Japan. A cross-site scripting vulnerability exists in LogStare Collector that stems from the presence of stored cross-site scripting in UserManagement, which could lead to arbitrary script execution...

CVE-2025-62189: Incorrect Authorization

LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request...

CVE-2025-61949: Improper Neutralization of Input During Web Page Generation

LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page...

PT-2025-47669

Name of the Vulnerable Software and Affected Versions LogStare Collector affected versions not specified Description A cross-site request forgery issue exists in LogStare Collector. If a user views a specially crafted webpage while logged in, actions they did not intend may be carried out...

LogStare Collector 安全漏洞

LogStare Collector is a data collector from LogStare Japan. A security vulnerability exists in LogStare Collector that stems from improper authorization in UserRegistration, which could result in a non-administrative user creating a new account...