CVE-2025-64695

CVE-2025-64695 affects LogStare Collector (Windows installer) with an Uncontrolled search path element (CWE-427) that can allow arbitrary code execution with the invoking user’s privileges. The Red Hat/NVD/JVN entries confirm this as a local issue in the Windows installer; the risk is described a...

CVE-2025-61949

LogStare Collector is affected by CVE-2025-61949, a stored cross-site scripting vulnerability in the UserManagement component. The issue allows an arbitrary script to run in the browser of users who log in to the management page when crafted user information is stored. Documents confirm the affec...

CVE-2025-62189

Summary: CVE-2025-62189 affects LogStare Collector, with an incorrect authorization in the UserRegistration component that could allow a non-administrative user to create new accounts via a crafted HTTP request. The issue is corroborated across multiple sources (NVD, Red Hat, JVN, CVE listings). ...

CVE-2025-62687

CVE-2025-62687 affects LogStare Collector. The CSRF vulnerability allows unintended operations when a logged-in user views a crafted page. Exploitation would require user interaction. Remediation per connected docs: update to LogStare Collector 2.4.2 (Windows/Linux) or apply vendor guidance; no e...

CVE-2025-58097

CVE-2025-58097 concerns LogStare Collector where the installation directory has incorrect access permissions. The issue allows a non-administrative user to manipulate files in the installation path and execution of arbitrary code with administrative privileges (local attack). The CVSS metrics ind...

CVE-2025-64299

Vulnerability summary (CVE-2025-64299) : LogStare Collector improperly handles password hash data, allowing an administrative user to obtain other users’ password hashes. Affected product: LogStare Collector. Impact: disclosure of password hashes (confidentiality issue); no exploitation details a...