Vulnerabilidades em emlog

40 resultados
Análise Vexday

O Emlog apresenta 31 vulnerabilidades registradas, com 2 classificadas como críticas, mas nenhuma atualmente sob ataque ativo segundo dados de exploração conhecida. A fraqueza dominante é injeção de código (CWE-79), concentrada principalmente em Cross-Site Scripting, e 5 vulnerabilidades foram publicadas nos últimos 90 dias, indicando risco moderado e em evolução que requer monitoramento contínuo.

CVE-2026-34607HIGHEmlog: Path Traversal in emUnZip() allows arbitrary file write leading to RCEEPSS 0.9%CVE-2025-47785HIGHEMLOG SQL Injection VulnerabilityEPSS 0.8%CVE-2026-22799CRITICALemlog Arbitrary File Upload VulnerabilityEPSS 0.7%CVE-2026-73849CRITICALemlog allows unauthenticated reinstallation via `install.php?action=reinstall`.EPSS 0.7%CVE-2025-47787HIGHEmlog Pro Contains a File Upload VulnerabilityEPSS 0.7%CVE-2026-34787MEDIUMEmlog: Local File Inclusion in plugin.php via unsanitized plugin parameterEPSS 0.6%CVE-2025-5119MEDIUMEmlog Pro api_controller.php sql injectionEPSS 0.5%CVE-2025-30372HIGHEmlog Pro contains an SQL injection vulnerability.EPSS 0.5%CVE-2025-47784MEDIUMEmlog vulnerable to Deserialization of Untrusted DataEPSS 0.5%CVE-2026-53757MEDIUMEmlog: Zip Slip Path Traversal in Plugin/Template ZIP Upload Enables RCEEPSS 0.5%CVE-2026-46686HIGHEmlog Reflected Cross-Site ScriptingEPSS 0.4%CVE-2026-73848MEDIUMEmlog: Stored XSS via Tag Name in Article EditorEPSS 0.4%CVE-2026-46687HIGHEmlog Local File Inclusion (LFI)EPSS 0.4%CVE-2026-53758HIGHEmlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not SanitizedEPSS 0.4%CVE-2026-53756MEDIUMEmlog Blind SQL Injection via Authentication CookieEPSS 0.4%CVE-2026-41517NONEEmlog: Remote Code Execution via Malicious Plugin UploadEPSS 0.4%CVE-2026-34788MEDIUMEmlog: SQL Injection in tag_model::updateTagName() via unsanitized parametersEPSS 0.4%CVE-2025-62717LOWEmlog Pro session verification code error due to clearing logic errorEPSS 0.4%CVE-2026-42287CRITICALEmlog: SQL Injection Vulnerability in log_model.php within addLog() and updateLog() FunctionsEPSS 0.4%CVE-2026-73850HIGHEmlog: Arbitrary SQL Execution Vulnerability in ai.php within queryDatabase() FunctionEPSS 0.4%