Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 31

Export CSV
CVE-2020-37202

NetworkSleuth 3.0.0.0 - 'Key' Denial of Service

NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Network Sleuth Nsauditor Networksleuth
CVE-2019-25733

NetShareWatcher 1.5.8.0 SEH Buffer Overflow

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to trigger code execution when the Find function is invoked.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Netsharewatcher Nsauditor Netsharewatcher
CVE-2020-37206

ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service

ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Sharealarmpro Advanced Network Access Control Sharealarmpro
CVE-2019-25434

SpotAuditor 5.3.1.0 Denial of Service via Registration Name Field

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotauditor Spotauditor
CVE-2021-47815

Nsauditor 3.2.3 - Denial of Service (PoC)

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2020-37130

Nsauditor 3.2.0.0 - 'Name' Denial of Service

Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2019-25597

NSauditor 3.1.2.0 Denial of Service via Community Field

NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a large payload into the Community field and trigger the Walk function to cause a denial of service condition.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2018-25213

Nsauditor 3.0.28.0 Local SEH Buffer Overflow

Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor Local Seh Buffer Overflow
CVE-2019-25591

DNSS Domain Name Search Software 2.1.8 Denial of Service

DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can trigger a denial of service by pasting a malicious registration code containing 300 repeated characters into the Name/Key field via the Register menu option.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Dnss Domain Name Search Software
CVE-2020-37179

APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service

APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Apkf Product Key Finder
CVE-2020-37180

GTalk Password Finder 2.2.1 - 'Key' Denial of Service

GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Gtalk Password Finder
CVE-2020-37187

SpotDialup 1.6.7 - 'Name' Denial of Service

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotdialup
CVE-2020-37188

SpotOutlook 1.2.6 - 'Name' Denial of Service

SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotoutlook
CVE-2020-37194

Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly long registration key. Attackers can generate a 1000-character payload file and paste it into the registration key field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Backup Key Recovery Recover Keys Crashed Hard Disk Drive
CVE-2020-37203

Office Product Key Finder 1.5.4 - Denial of Service

Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the registration code input. Attackers can create a specially crafted text file and paste it into the 'Name and Key' field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Office Product Key Finder
CVE-2020-37119

Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))

Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a carefully constructed exploit.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor
CVE-2019-25340

SpotAuditor 5.3.2 - 'Base64' Denial Of Service

SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotauditor Spotauditor
CVE-2019-25336

SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)

SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotauditor Spotauditor
CVE-2020-37196

Dnss Domain Name Search Software - 'Key' Denial of Service

Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Domain Name Search Software Nsauditor Dnss Domain Name Search Software
CVE-2020-37212

SpotMSN 2.4.6 - 'Name' Denial of Service

SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotmsn Spotmsn