Jpcert Logontracer
6 CVEs affecting Jpcert Logontracer. Latest disclosed: 2026-04-27. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16168 | Critical | 9.8 | 2019-01-09 | LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors. |
CVE-2018-16167 | Critical | 9.8 | 2019-01-09 | LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. |
CVE-2026-33277 | High | 8.8 | 2026-04-27 | An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user. |
CVE-2018-16166 | High | 8.8 | 2019-01-09 | LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors. |
CVE-2018-16165 | Medium | 6.1 | 2019-01-09 | Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2026-33566 | Medium | 4.3 | 2026-04-27 | There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be al… |