Jpcert

9 CVEs across 3 Jpcert products. Browse Jpcert vulnerabilities, severities, and proof-of-concept exploits.

Jpcert products with known CVEs

ProductCVEs
Logontracer6
Special Interest Group Network For Analysis And Liaison2
Emocheck1
Jpcert CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-33566Medium4.32026-04-27There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be al…
CVE-2026-33277High8.82026-04-27An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.
CVE-2026-28704High7.82026-04-10Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the priv…
CVE-2023-38752Medium4.32023-08-09Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view…
CVE-2023-38751Medium4.32023-08-09Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view…
CVE-2018-16168Critical9.82019-01-09LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.
CVE-2018-16167Critical9.82019-01-09LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CVE-2018-16166High8.82019-01-09LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.
CVE-2018-16165Medium6.12019-01-09Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.