CVE-2019-3992

CVE-2019-3992 affects ELOG 3.1.4-57bea22 and earlier; an unauthenticated remote attacker can access the server’s configuration file via an HTTP GET, potentially exposing valid admin usernames and, in older versions, passwords. Connected sources confirm the vulnerability and that Fedora advisories...

CVE-2019-3994

CVE-2019-3994 affects ELOG 3.1.4-57bea22 and earlier. The vulnerability is a denial-of-service caused by a use-after-free in the retrieve_url() function, enabling a remote unauthenticated attacker to crash the ELOG server by sending multiple HTTP POST requests. The public documents consistently d...

CVE-2019-3995

CVE-2019-3995 affects ELOG 3.1.4-57bea22 and earlier. The root cause is a NULL pointer dereference, enabling a remote unauthenticated attacker to crash the ELOG server via a crafted HTTP GET request (DoS). Multiple connected sources confirm Fedora advisories and CNVD entries describing the same i...

CVE-2019-3996

CVE-2019-3996 affects ELOG 3.1.4-57bea22 and earlier, enabling an unauthenticated remote attacker to use ELOG as an HTTP GET proxy by sending crafted HTTP POST requests. Public writeups in NVD/Nessus/Fedora advisories confirm the vulnerability in the ELOG web application and identify patched Fedo...

CVE-2019-3993

Summary: CVE-2019-3993 affects ELOG 3.1.4-57bea22 and earlier. A remote unauthenticated attacker can cause an information disclosure to recover a user’s password hash via a crafted HTTP POST request, exposing credential material. Affected versions: ELOG 3.1.4-57bea22 and earlier (per Red Hat/RH, ...

CVE-2016-6342

Summary: CVE-2016-6342 affects the Erlang logging library elog version 3.1.1, enabling remote attackers to publish data in the logbook under any username. This is documented across multiple sources, including NVD/NIST, CNVD, OSV, and vendor advisories. Impact: Allows a remote attacker to post dat...

CVE-2025-62618

ELOG (Electronic Logbook) up to version 3.1.5-20251014 is vulnerable: authenticated users can upload arbitrary HTML files, which are executed in other users’ contexts, exposing usernames and password hashes and enabling credential theft or offline cracking. In the 3.1.5-20251014 release, HTML fil...

CVE-2025-64348

CVE-2025-64348 affects ELOG (ELOG

CVE-2025-64349

CVE-2025-64349 affects ELOG (the Electronic Logbook) with an authentication-level flaw: an authenticated, low-privilege user can modify another user’s profile, potentially changing the target’s email address and triggering a password reset to take over the account. Public records note ELOG defaul...