CVE-2018-16167

CVE-2018-16167 affects LogonTracer 1.2.0 and earlier. The issue is an OS command injection vulnerability that allows remote attackers to execute arbitrary commands on the server running the affected software. The connected sources consistently describe remote Command Injection with a high/critica...

CVE-2018-16165

LogonTracer (visual Windows log analysis tool) is affected by CVE-2018-16165: Cross-site Scripting (CWE-79) in version 1.2.0 and earlier. An attacker could remotely inject arbitrary script/HTML into a victim’s browser via unspecified vectors. The connected JVN entry confirms this CVE and notes a ...

CVE-2018-16168

CVE-2018-16168 affects LogonTracer up to version 1.2.0. It enables remote code execution via Python code injection on the server where LogonTracer is installed; vectors are not detailed in the core CVE description. JVN/CVEs formally enumerate a Code Injection vulnerability (CWE-94) affecting Logo...

CVE-2018-16166

CVE-2018-16166 affects LogonTracer ≤ 1.2.0 through a XML External Entity (XXE) injection. The vulnerability could allow an attacker to obtain arbitrary files on the server where LogonTracer runs, via unspecified vectors. Public detailing in connected sources confirms the XXE issue and the impact;...

CVE-2026-33277

CVE-2026-33277 concerns an OS command injection in LogonTracer prior to v2.0.0. A logged-in user can cause arbitrary OS commands to execute due to the vulnerability in how input is processed. Affected software: LogonTracer (before version 2.0.0). The root cause is an input handling flaw that allo...

CVE-2026-33566

CVE-2026-33566 is a cypher injection issue in LogonTracer prior to v2.0.0. When specially crafted Windows event log data is loaded, the contents of the database may be altered. The issue is documented across multiple sources (NVD, CVE List, JVN) and is addressed by updating to LogonTracer v2.0.0....