Vulnerabilidades do Nsasoft Nsauditor SpotAuditor
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Nsasoft Nsauditor SpotAuditor: 3 registro(s), com versões afetadas e correções.
CVE-2019-25434
Média · 5.5
CWE-121 20/02/2026
SpotAuditor 5.3.1.0 Denial of Service via Registration Name Field
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
CVE-2019-25340
Alta · 7.5
CWE-121 12/02/2026
SpotAuditor 5.3.2 - 'Base64' Denial Of Service
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.
CVE-2019-25336
Alta · 7.8
CWE-121 12/02/2026
SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)
SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.