Filtered by vendor Nsasoft Subscriptions
Filtered by product Spotauditor Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2019-25434 1 Nsasoft 2 Nsauditor Spotauditor, Spotauditor 2026-03-05 7.5 High
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
CVE-2019-25336 1 Nsasoft 2 Nsauditor Spotauditor, Spotauditor 2026-02-20 8.4 High
SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.
CVE-2019-25340 1 Nsasoft 2 Nsauditor Spotauditor, Spotauditor 2026-02-20 7.5 High
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.
CVE-2021-27722 1 Nsasoft 1 Spotauditor 2024-11-21 7.5 High
An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.