Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 48

Export CSV
CVE-2020-37202

NetworkSleuth 3.0.0.0 - 'Key' Denial of Service

NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Network Sleuth Nsauditor Networksleuth
CVE-2019-25733

NetShareWatcher 1.5.8.0 SEH Buffer Overflow

NetShareWatcher 1.5.8.0 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input. Attackers can craft a payload with overwritten SEH and NSEH pointers through the Restrictions custom filter field to trigger code execution when the Find function is invoked.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Netsharewatcher Nsauditor Netsharewatcher
CVE-2020-37206

ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service

ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Sharealarmpro Advanced Network Access Control Sharealarmpro
CVE-2019-25434

SpotAuditor 5.3.1.0 Denial of Service via Registration Name Field

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotauditor Spotauditor
CVE-2021-47815

Nsauditor 3.2.3 - Denial of Service (PoC)

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2020-37130

Nsauditor 3.2.0.0 - 'Name' Denial of Service

Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2019-25597

NSauditor 3.1.2.0 Denial of Service via Community Field

NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a large payload into the Community field and trigger the Walk function to cause a denial of service condition.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2018-25213

Nsauditor 3.0.28.0 Local SEH Buffer Overflow

Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor Local Seh Buffer Overflow
CVE-2019-25666

SpotAuditor 3.6.7 Denial of Service Buffer Overflow

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Spotauditor Spotauditor
CVE-2019-25711

SpotFTP Password Recover 2.4.2 Denial of Service via Name Field

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash when submitting the registration code.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Spotftp Spotftp Password Recover
CVE-2019-25712

BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service via Registration Key

BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key value. Attackers can trigger a denial of service by entering a 256-byte buffer of repeated characters in the Key registration field, causing the application to crash during registration processing.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Blueauditor Blueauditor
CVE-2019-25559

SpotPaltalk 1.1.5 Name/Key Field Denial of Service

SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK button is clicked.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Spotpaltalk Spotpaltalk
CVE-2019-25591

DNSS Domain Name Search Software 2.1.8 Denial of Service

DNSS Domain Name Search Software 2.1.8 contains a buffer overflow vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can trigger a denial of service by pasting a malicious registration code containing 300 repeated characters into the Name/Key field via the Register menu option.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Dnss Domain Name Search Software
CVE-2020-37043

10-Strike Bandwidth Monitor 3.9 - Buffer Overflow

10-Strike Bandwidth Monitor 3.9 contains a buffer overflow vulnerability that allows attackers to bypass SafeSEH, ASLR, and DEP protections through carefully crafted input. Attackers can exploit the vulnerability by sending a malicious payload to the application's registration key input, enabling remote code execution and launching arbitrary system commands.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
10-strike Nsasoft
Products
Bandwidth Monitor Network Bandwidth Monitor
CVE-2020-37021

Bandwidth Monitor 3.9 - 'Svc10StrikeBandMontitor' Unquoted Service Path

10-Strike Bandwidth Monitor 3.9 contains an unquoted service path vulnerability in multiple services that allows local attackers to escalate privileges. Attackers can place a malicious executable in specific file path locations to achieve privilege escalation to SYSTEM during service startup.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
10-strike Nsasoft
Products
Bandwidth Monitor Network Bandwidth Monitor
CVE-2020-37194

Backup Key Recovery Recover Keys Crashed Hard Disk Drive 2.2.5 - 'Key' Denial of Service

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly long registration key. Attackers can generate a 1000-character payload file and paste it into the registration key field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Backup Key Recovery Recover Keys Crashed Hard Disk Drive
CVE-2020-37187

SpotDialup 1.6.7 - 'Name' Denial of Service

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotdialup
CVE-2020-37179

APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service

APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Apkf Product Key Finder
CVE-2020-37180

GTalk Password Finder 2.2.1 - 'Key' Denial of Service

GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Gtalk Password Finder
CVE-2020-37188

SpotOutlook 1.2.6 - 'Name' Denial of Service

SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft
Products
Nsauditor Spotoutlook