https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-1154.htmlhttps://patchthecve.com/cve/CVE-2002-1154.htmlTue, 16 Jun 2026 21:58:49 +0000MEDIUM 5.0: anlgform.pl in Analog before 5.23 does not restrict access to the PROGRESSFREQ progress update command, which allows remote attackers to cause a denial of service (disk consumption) by using the command to report updates more frequently and fill the web server error log.https://patchthecve.com/cve/CVE-2002-0166.htmlhttps://patchthecve.com/cve/CVE-2002-0166.htmlTue, 16 Jun 2026 21:56:55 +0000HIGH 7.5: Cross-site scripting vulnerability in analog before 5.22 allows remote attackers to execute Javascript via an HTTP request containing the script, which is entered into a web logfile and not properly filtered by analog during display.https://patchthecve.com/cve/CVE-2001-0301.htmlhttps://patchthecve.com/cve/CVE-2001-0301.htmlTue, 16 Jun 2026 21:54:03 +0000HIGH 10.0: Buffer overflow in Analog before 4.16 allows remote attackers to execute arbitrary commands by using the ALIAS command to construct large strings.https://patchthecve.com/cve/CVE-1999-1287.htmlhttps://patchthecve.com/cve/CVE-1999-1287.htmlTue, 16 Jun 2026 21:50:06 +0000MEDIUM 5.0: Vulnerability in Analog 3.0 and earlier allows remote attackers to read arbitrary files via the forms interface.