jpcert records

9 published records for vendor jpcert.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
61This week	CVE-2018-16167Proof of concept	LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.jpcert · logontracer · CWE-78 pre-auth RCE Command injection	Critical9.8	—	74.9%	Jan 9, 2019
40Plan	CVE-2018-16168No exploit	LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.jpcert · logontracer · CWE-94 pre-auth RCE	Critical9.8	—	2.4%	Jan 9, 2019
36Monitor	CVE-2018-16166No exploit	LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.jpcert · logontracer · CWE-611 Pre-auth XXE	High8.8	—	1.9%	Jan 9, 2019
35Monitor	CVE-2026-33277No exploit	An OS command Injection issue exists in LogonTracer prior to v2.0.0.jpcert · logontracer · CWE-78 RCE Command injection	High8.7	—	2.3%	Apr 26, 2026
33Monitor	CVE-2026-28704No exploit	Emocheck insecurely loads Dynamic Link Libraries (DLLs).jpcert · emocheck · CWE-427 RCE Local privilege escalation	High8.4	—	0.2%	Apr 10, 2026
24Monitor	CVE-2018-16165No exploit	Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspejpcert · logontracer · CWE-79 Pre-auth XSS	Medium6.1	—	1.1%	Jan 9, 2019
20Monitor	CVE-2026-33566No exploit	There is a cypher injection issue in LogonTracer prior to v2.0.0.jpcert · logontracer · CWE-943 Pre-auth SQL injection	Medium5.1	—	0.3%	Apr 26, 2026
17Monitor	CVE-2023-38752No exploit	Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorizejpcert · special interest group network for analysis and liaison	Medium4.3	—	0.5%	Aug 9, 2023
17Monitor	CVE-2023-38751No exploit	Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorizejpcert · special interest group network for analysis and liaison	Medium4.3	—	0.5%	Aug 9, 2023

CVE-2018-16167
61This week
LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
CriticalCVSS 9.8Proof of conceptEPSS 75%
- pre-auth RCE
- Command injection
jpcert · logontracerJan 9, 2019
CVE-2018-16168
40Plan
LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
jpcert · logontracerJan 9, 2019
CVE-2018-16166
36Monitor
LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
- XXE
jpcert · logontracerJan 9, 2019
CVE-2026-33277
35Monitor
An OS command Injection issue exists in LogonTracer prior to v2.0.0.
HighCVSS 8.7No exploitEPSS 2%
- RCE
- Command injection
jpcert · logontracerApr 26, 2026
CVE-2026-28704
33Monitor
Emocheck insecurely loads Dynamic Link Libraries (DLLs).
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Local privilege escalation
jpcert · emocheckApr 10, 2026
CVE-2018-16165
24Monitor
Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspe
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
jpcert · logontracerJan 9, 2019
CVE-2026-33566
20Monitor
There is a cypher injection issue in LogonTracer prior to v2.0.0.
MediumCVSS 5.1No exploitEPSS 0%
- Pre-auth
- SQL injection
jpcert · logontracerApr 26, 2026
CVE-2023-38752
17Monitor
Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorize
MediumCVSS 4.3No exploitEPSS 0%
jpcert · special interest group network for analysis and liaisonAug 9, 2023
CVE-2023-38751
17Monitor
Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorize
MediumCVSS 4.3No exploitEPSS 0%
jpcert · special interest group network for analysis and liaisonAug 9, 2023