Jpcert vulnerabilities
Published CVEs affecting Jpcert products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-33566
Medium · 4.3
CWE-943 Apr 26, 2026
There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted…
There is a cypher injection issue in LogonTracer prior to v2.0.0. If specially crafted Windows event log data is loaded, the contents of the database may be altered.
CVE-2026-33277
High · 8.8
CWE-78 Apr 26, 2026
OS Command Injection in Jpcert Logontracer
An OS command Injection issue exists in LogonTracer prior to v2.0.0. An arbitrary OS command may be executed by a logged-in user.
CVE-2026-28704
High · 7.8
CWE-427 Apr 10, 2026
Uncontrolled Search Path Element in Jpcert Emocheck
Emocheck insecurely loads Dynamic Link Libraries (DLLs). If a crafted DLL file is placed to the same directory, an arbitrary code may be executed with the privilege of the user invoking EmoCheck.