jpcert kayıtları

jpcert üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 2
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

9 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
61Bu hafta	CVE-2018-16167Kavram kanıtı	LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.jpcert · logontracer · CWE-78 pre-auth RCE Komut enjeksiyonu	Kritik9,8	—	%74,9	9 Oca 2019
40Planlayın	CVE-2018-16168İstismar yok	LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.jpcert · logontracer · CWE-94 pre-auth RCE	Kritik9,8	—	%2,4	9 Oca 2019
36İzleyin	CVE-2018-16166İstismar yok	LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.jpcert · logontracer · CWE-611 Kimlik doğrulamasız XXE	Yüksek8,8	—	%1,9	9 Oca 2019
35İzleyin	CVE-2026-33277İstismar yok	An OS command Injection issue exists in LogonTracer prior to v2.0.0.jpcert · logontracer · CWE-78 RCE Komut enjeksiyonu	Yüksek8,7	—	%2,3	26 Nis 2026
33İzleyin	CVE-2026-28704İstismar yok	Emocheck insecurely loads Dynamic Link Libraries (DLLs).jpcert · emocheck · CWE-427 RCE Yerel yetki yükseltme	Yüksek8,4	—	%0,2	10 Nis 2026
24İzleyin	CVE-2018-16165İstismar yok	Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspejpcert · logontracer · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%1,1	9 Oca 2019
20İzleyin	CVE-2026-33566İstismar yok	There is a cypher injection issue in LogonTracer prior to v2.0.0.jpcert · logontracer · CWE-943 Kimlik doğrulamasız SQL enjeksiyonu	Orta5,1	—	%0,3	26 Nis 2026
17İzleyin	CVE-2023-38752İstismar yok	Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorizejpcert · special interest group network for analysis and liaison	Orta4,3	—	%0,5	9 Ağu 2023
17İzleyin	CVE-2023-38751İstismar yok	Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorizejpcert · special interest group network for analysis and liaison	Orta4,3	—	%0,5	9 Ağu 2023

CVE-2018-16167
61Bu hafta
LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
KritikCVSS 9,8Kavram kanıtıEPSS %75
- pre-auth RCE
- Komut enjeksiyonu
jpcert · logontracer9 Oca 2019
CVE-2018-16168
40Planlayın
LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.
KritikCVSS 9,8İstismar yokEPSS %2
- pre-auth RCE
jpcert · logontracer9 Oca 2019
CVE-2018-16166
36İzleyin
LogonTracer 1.2.0 and earlier allows remote attackers to conduct XML External Entity (XXE) attacks via unspecified vectors.
YüksekCVSS 8,8İstismar yokEPSS %2
- Kimlik doğrulamasız
- XXE
jpcert · logontracer9 Oca 2019
CVE-2026-33277
35İzleyin
An OS command Injection issue exists in LogonTracer prior to v2.0.0.
YüksekCVSS 8,7İstismar yokEPSS %2
- RCE
- Komut enjeksiyonu
jpcert · logontracer26 Nis 2026
CVE-2026-28704
33İzleyin
Emocheck insecurely loads Dynamic Link Libraries (DLLs).
YüksekCVSS 8,4İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
jpcert · emocheck10 Nis 2026
CVE-2018-16165
24İzleyin
Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspe
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
jpcert · logontracer9 Oca 2019
CVE-2026-33566
20İzleyin
There is a cypher injection issue in LogonTracer prior to v2.0.0.
OrtaCVSS 5,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- SQL enjeksiyonu
jpcert · logontracer26 Nis 2026
CVE-2023-38752
17İzleyin
Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorize
OrtaCVSS 4,3İstismar yokEPSS %0
jpcert · special interest group network for analysis and liaison9 Ağu 2023
CVE-2023-38751
17İzleyin
Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorize
OrtaCVSS 4,3İstismar yokEPSS %0
jpcert · special interest group network for analysis and liaison9 Ağu 2023