Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-1999-1287

Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.

CVSS 2.0 · 5.0 Medium EPSS 1.3% KEV · Not listed
Vendors
Stephen Turner
Products
Analog
CVE-2002-0166

security flaw

Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.

CVSS 2.0 · 7.5 High EPSS 1.8% KEV · Not listed
Vendors
Redhat Stephen Turner
Products
Powertools Analog
CVE-2002-1154

security flaw

anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.

CVSS 2.0 · 5.0 Medium EPSS 1.7% KEV · Not listed
Vendors
Redhat Stephen Turner
Products
Powertools Analog