threat
engine
.sh
Back
·
··:··
Sign in
Account
free plan
Dashboard
Stack Monitoring
Notifications
Watchlist
Account & tokens
API docs
Pricing
Sign out
Home
/
Product
/
klogserver klog server
Product
klogserver klog server
2 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2021-3317
<= 2.4.1
KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source
8.8
HIGH
CVE-2020-35729
all versions
KLog Server 2.4.1 allows OS command injection via shell metacharacters in the actions/authenticate.php user parameter.
9.8
CRITICAL
SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Recently exploited
Daily brief
Change tracking
Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND
Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Atomic tests
Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation
Compliance and GRC
Framework mapping
Control assessment
Audit view
Atlas
Search
Threat actors
Techniques
Tools & malware
CWE
CAPEC
KEV catalog
Package vulns
About
All capabilities
Pricing
API docs
Live status
Privacy policy
Terms of service
threatengine.sh
Are you sure?
Cancel
Confirm
We use one first-party cookie to remember how you found us, only if you allow it. Everything the site needs to work uses essential cookies. See our
privacy policy
.
Essential only
Accept all