Nsasoft Nsauditor SpotAuditor vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Nsasoft Nsauditor SpotAuditor: 3 record(s), with affected versions and fixes.
CVE-2019-25434
Medium · 5.5
CWE-121 Feb 20, 2026
SpotAuditor 5.3.1.0 Denial of Service via Registration Name Field
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
CVE-2019-25340
High · 7.5
CWE-121 Feb 12, 2026
SpotAuditor 5.3.2 - 'Base64' Denial Of Service
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.
CVE-2019-25336
High · 7.8
CWE-121 Feb 12, 2026
SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)
SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.