Jpcert Logontracer vulnerabilities

CVE-2018-16167 [CRITICAL] CWE-78 CVE-2018-16167: LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecifi LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVE-2026-33277 [HIGH] CWE-78 CVE-2026-33277: An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.

CVE-2018-16168 [CRITICAL] CWE-94 CVE-2018-16168: LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via u LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.

CVE-2018-16166 [HIGH] CWE-611 CVE-2018-16166: LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks v LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

CVE-2026-33566 [MEDIUM] CWE-943 CVE-2026-33566: There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.

CVE-2018-16165 [MEDIUM] CWE-79 CVE-2018-16165: Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to injec Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.