Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 20

Export CSV
CVE-2021-47815

Nsauditor 3.2.3 - Denial of Service (PoC)

Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2020-37130

Nsauditor 3.2.0.0 - 'Name' Denial of Service

Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2019-25597

NSauditor 3.1.2.0 Denial of Service via Community Field

NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a large payload into the Community field and trigger the Walk function to cause a denial of service condition.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor
CVE-2018-25213

Nsauditor 3.0.28.0 Local SEH Buffer Overflow

Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor Local Seh Buffer Overflow
CVE-2019-25666

SpotAuditor 3.6.7 Denial of Service Buffer Overflow

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Spotauditor Spotauditor
CVE-2019-25711

SpotFTP Password Recover 2.4.2 Denial of Service via Name Field

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash when submitting the registration code.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Spotftp Spotftp Password Recover
CVE-2019-25712

BlueAuditor 1.7.2.0 Buffer Overflow Denial of Service via Registration Key

BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key value. Attackers can trigger a denial of service by entering a 256-byte buffer of repeated characters in the Key registration field, causing the application to crash during registration processing.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Blueauditor Blueauditor
CVE-2019-25559

SpotPaltalk 1.1.5 Name/Key Field Denial of Service

SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK button is clicked.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Spotpaltalk Spotpaltalk
CVE-2019-25599

Backup Key Recovery 2.2.4 Denial of Service via Name Field

Backup Key Recovery 2.2.4 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 or more characters into the Name field during registration to trigger a crash when submitting the form.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsauditor
Products
Backup Key Recovery
CVE-2019-25463

SpotIE Internet Explorer Password Recovery 2.9.5 Key Field DoS

SpotIE Internet Explorer Password Recovery 2.9.5 contains a denial of service vulnerability in the registration key input field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 256-character payload into the Key field during registration to trigger a buffer overflow and crash the application.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsauditor
Products
Spotie Internet Explorer Password Recovery
CVE-2020-37122

SpotFTP-FTP Password Recover 2.4.8 - Denial of Service

SpotFTP-FTP Password Recover 2.4.8 contains a denial of service vulnerability that allows attackers to crash the application by generating a large buffer overflow. Attackers can create a text file with 1000 'Z' characters and input it as a registration code to trigger the application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsauditor
Products
Ftp Password Recover
CVE-2020-37185

Backup Key Recovery 2.2.5 - 'Name' Denial of Service

Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsauditor
Products
Backup Key Recovery
CVE-2021-47813

Backup Key Recovery 2.2.7 - Denial of Service (PoC)

Backup Key Recovery 2.2.7 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a large buffer of 256 repeated characters into the registration key field to trigger application instability and potential crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsauditor
Products
Backup Key Recovery
CVE-2020-37131

Product Key Explorer 4.2.2.0 - 'Key' Denial of Service

Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration key. Attackers can generate a payload of 1000 bytes of repeated characters and paste it into the 'Key' input field to trigger the application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Product Key Explorer Product Key Explorer
CVE-2019-25334

Product Key Explorer 4.2.0.0 - 'Name' Denial of Service

Product Key Explorer 4.2.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by overflowing the registration name input field. Attackers can create a specially crafted text file with repeated characters to trigger a buffer overflow when pasted into the registration name field, causing the application to crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Product Key Explorer Product Key Explorer
CVE-2019-25596

SpotAuditor 5.2.6 Name Field Denial of Service

SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 repeated characters into the Name input during registration to trigger an application crash.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Spotauditor Spotauditor
CVE-2021-47814

NBMonitor 1.6.8 - Denial of Service (PoC)

NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a 256-character buffer into the registration key field to trigger an application crash and potential system instability.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nbmonitor Nbmonitor
CVE-2020-37199

NBMonitor 1.6.6.0 - 'Key' Denial of Service

NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nbmonitor Nbmonitor
CVE-2020-37204

RemShutdown 2.9.0.0 - 'Key' Denial of Service

RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Remshutdown Nsauditor Remshutdown
CVE-2021-47895

Nsauditor 3.2.2.0 - 'Event Description' Denial of Service

Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Event Description field with a large buffer. Attackers can generate a 10,000-character 'U' buffer and paste it into the Event Description field to trigger an application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Nsasoft Nsauditor
Products
Nsauditor Nsauditor