CVE-2018-16166

Description

References

• JPCERTCC/LogonTracer release v1.2.1 · Release Notes
• jvn.jp/en/vu/JVNVU98026636/index.html · Third Party Advisory

Autres vulnérabilités de logontracer

• CVE-2026-33566MOYENNE 5.1There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the…
• CVE-2026-33277ÉLEVÉE 8.7An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.
• CVE-2018-16168CRITIQUE 9.8LogonTracer 1.2.0 and earlier allows remote attackers to conduct Python code injection attacks via unspecified vectors.
• CVE-2018-16167CRITIQUE 9.8LogonTracer 1.2.0 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors.
• CVE-2018-16165MOYENNE 6.1Cross-site scripting vulnerability in LogonTracer 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspe…