Vulnerabilities (CVE)

Filtered by vendor Nsasoft Subscribe
Total 36 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-25597 1 Nsasoft 1 Nsauditor 2026-05-01 N/A 6.2 MEDIUM
NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a large payload into the Community field and trigger the Walk function to cause a denial of service condition.
CVE-2020-37130 1 Nsasoft 1 Nsauditor 2026-05-01 N/A 7.5 HIGH
Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.
CVE-2021-47815 1 Nsasoft 1 Nsauditor 2026-05-01 N/A 7.5 HIGH
Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.
CVE-2018-25213 1 Nsasoft 1 Nsauditor 2026-05-01 N/A 8.4 HIGH
Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.
CVE-2019-25666 1 Nsasoft 1 Spotauditor 2026-04-20 N/A 6.2 MEDIUM
SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.
CVE-2019-25711 1 Nsasoft 1 Spotftp 2026-04-17 N/A 6.2 MEDIUM
SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash when submitting the registration code.
CVE-2019-25712 1 Nsasoft 1 Blueauditor 2026-04-17 N/A 6.2 MEDIUM
BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key value. Attackers can trigger a denial of service by entering a 256-byte buffer of repeated characters in the Key registration field, causing the application to crash during registration processing.
CVE-2019-25559 1 Nsasoft 1 Spotpaltalk 2026-04-16 N/A 5.5 MEDIUM
SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK button is clicked.
CVE-2020-37131 1 Nsasoft 1 Product Key Explorer 2026-03-26 N/A 6.2 MEDIUM
Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration key. Attackers can generate a payload of 1000 bytes of repeated characters and paste it into the 'Key' input field to trigger the application crash.
CVE-2019-25334 1 Nsasoft 1 Product Key Explorer 2026-03-25 N/A 6.2 MEDIUM
Product Key Explorer 4.2.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by overflowing the registration name input field. Attackers can create a specially crafted text file with repeated characters to trigger a buffer overflow when pasted into the registration name field, causing the application to crash.
CVE-2019-25596 1 Nsasoft 1 Spotauditor 2026-03-23 N/A 6.2 MEDIUM
SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 repeated characters into the Name input during registration to trigger an application crash.
CVE-2019-25434 1 Nsasoft 1 Spotauditor 2026-03-05 N/A 7.5 HIGH
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
CVE-2020-37196 1 Nsasoft 1 Domain Name Search Software 2026-02-27 N/A 7.5 HIGH
Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
CVE-2020-37212 1 Nsasoft 1 Spotmsn 2026-02-26 N/A 7.5 HIGH
SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
CVE-2020-37211 1 Nsasoft 1 Spotim 2026-02-26 N/A 7.5 HIGH
SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
CVE-2020-37210 1 Nsasoft 1 Spotie 2026-02-26 N/A 7.5 HIGH
SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
CVE-2020-37207 1 Nsasoft 1 Spotdialup 2026-02-26 N/A 7.5 HIGH
SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
CVE-2020-37206 1 Nsasoft 1 Sharealarmpro 2026-02-26 N/A 7.5 HIGH
ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.
CVE-2020-37197 1 Nsasoft 1 Domain Name Search Software 2026-02-26 N/A 7.5 HIGH
Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
CVE-2020-37199 1 Nsasoft 1 Nbmonitor 2026-02-26 N/A 7.5 HIGH
NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.