Vulnerabilities (CVE)

Filtered by vendor Zrlog Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-27514 1 Zrlog 1 Zrlog 2023-08-18 N/A 9.1 CRITICAL
Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to delete arbitrary files and cause a denial of service (DoS).
CVE-2021-44093 1 Zrlog 1 Zrlog 2021-11-29 7.5 HIGH 9.8 CRITICAL
A Remote Command Execution vulnerability on the background in zrlog 2.2.2, at the upload avatar function, could bypass the original limit, upload the JSP file to get a WebShell