Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor/product archive

jpcert / logontracer CVEs

Beta · best-effort

6 CVEs tagged to jpcert / logontracer — 2 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to jpcert vendor archive

CVE-2026-33566

Published Apr 27, 2026

There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.

CVSS 5.1 · Medium

evidence mentions: 2
Buzz score: 17.5

Vendor/product tagsBeta · best-effort

CVE-2026-33277

Published Apr 27, 2026

An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.

CVSS 8.7 · High

evidence mentions: 2
Buzz score: 17.5

Vendor/product tagsBeta · best-effort

CVE-2018-16168

Published Jan 9, 2019

LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2018-16167

Published Jan 9, 2019

LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 9.8 · Critical

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2018-16166

Published Jan 9, 2019

LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2018-16165

Published Jan 9, 2019

Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-6 of 6 CVEsPage 1 of 1