Approved changes feed: RSS · Atom

cpe:2.3:a:logstare_inc.:logstare_collector_(for_linux):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLogstare Inc. (8f994c86-d96a-5e37-944a-5eeb28406f0d)
ProductLogstare Collector (For Linux) (80f51b83-c187-5e81-94de-7cbdee3ca675)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-64299 vulnerable 2026-06-08 07:39:18.339732 Details available
MEDIUM (4.9)
LogStare Collector improperly handles the password hash data. An administrative user may obtain the other users' password hashes.
Published: 2025-11-21T06:18:02.599Z
Updated: 2025-11-21T14:57:57.524Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62687 vulnerable 2026-06-08 07:39:16.456213 Details available
MEDIUM (6.5)
Cross-site request forgery vulnerability exists in LogStare Collector. If a user views a crafted page while logged, unintended operations may be performed.
Published: 2025-11-21T06:17:59.189Z
Updated: 2025-11-21T14:58:03.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62189 vulnerable 2026-06-08 07:37:28.765029 Details available
MEDIUM (4.3)
LogStare Collector contains an incorrect authorization vulnerability in UserRegistration. If exploited, a non-administrative user may create a new user account by sending a crafted HTTP request.
Published: 2025-11-21T06:17:56.472Z
Updated: 2025-11-21T14:58:09.579Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61949 vulnerable 2026-06-08 07:37:28.396094 Details available
MEDIUM (5.4)
LogStare Collector contains a stored cross-site scripting vulnerability in UserManagement. If crafted user information is stored, an arbitrary script may be executed on the web browser of the user who logs in to the product's management page.
Published: 2025-11-21T06:17:53.887Z
Updated: 2025-11-21T14:58:14.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58097 vulnerable 2026-06-08 07:35:17.190753 Details available
MEDIUM (5.5)
The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the installation directory and execute arbitrary code with the administrative privilege.
Published: 2025-11-21T06:17:50.799Z
Updated: 2025-11-21T14:58:20.681Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.