Known vulnerabilities in Emlog Pro - page 2

Vendor: Emlog
Software: Emlog Pro
Software CPE: cpe:2.3:a:emlog:emlog_pro:*:*:*:*:*:*:*:*
Total vulnerabilities: 48
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Emlog Pro Emlog Pro is affected by 48 known vulnerabilities: 2 high, 17 medium, 29 low Critical High Medium Low

Vulnerabilities (48)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU142806 - Cross-Site Request Forgery (CSRF)
CVE-2026-34228
CWE-352 Medium
No
No
2.6.8 15.08.2026 SB20260815103
#VU142805 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
2.6.7 15.08.2026 SB20260815102
#VU142804 - Cross-Site Request Forgery (CSRF)
CVE-2026-31954
CWE-352 Low
No
No
2.6.7 15.08.2026 SB20260815102
#VU142802 - Improper Access Control
CVE-2026-22799
CWE-284 Medium
No
No
2.6.1 15.08.2026 SB20260815100
#VU142801 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21432
CWE-79 Low
No
No
2.5.24 15.08.2026 SB2026081599
#VU142800 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-21431
CWE-79 Low
No
No
2.5.24 15.08.2026 SB2026081599
#VU142799 - Cross-Site Request Forgery (CSRF)
CVE-2026-21430
CWE-352 Low
No
No
2.5.24 15.08.2026 SB2026081599
#VU142798 - Improper Access Control
CVE-2026-21429
CWE-284 Low
No
No
2.5.24 15.08.2026 SB2026081599
#VU142796 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-61599
CWE-79 Low
No
No
2.5.22 15.08.2026 SB2026081598
#VU125574 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.6.10 09.04.2026 SB2026041016
#VU125573 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
2.6.10 09.04.2026 SB2026041016
#VU125572 - Improper input validation
CVE-2025-47787
CWE-20 Medium
No
No
2.5.10 09.04.2026 SB2026040952
#VU124769 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-34607
CWE-22 Low
No
No
2.6.2 01.04.2026 SB2026040149
#VU124768 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2026-34787
CWE-98 Low
Available
No
2.6.2 01.04.2026 SB2026040149
#VU124767 - Deserialization of Untrusted Data
CWE-502 Low
No
No
2.6.2 01.04.2026 SB2026040149
#VU124766 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-34788
CWE-89 Low
No
No
2.6.2 01.04.2026 SB2026040149
#VU117667 - Improper Authentication
CVE-2025-62717
CWE-287 Medium
No
No
- 27.10.2025 SB2025102718
#VU116914 - Cross-Site Request Forgery (CSRF)
CVE-2025-61930
CWE-352 Low
Available
No
2.5.20 13.10.2025 SB2025101342
#VU116862 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-61769
CWE-79 Low
No
No
- 09.10.2025 SB2025100927
#VU142795 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-47785
CWE-89 Medium
No
No
2.5.10 15.05.2025 SB2026040952


Showing elements 21 - 40 out of 48