Lucene search
K

41 matches found

EUVD
EUVD
added 2026/04/12 3:30 p.m.4 views

EUVD-2019-20145

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash...

6.9CVSS6AI score0.0001EPSS
Exploits1References3
NVD
NVD
added 2026/04/12 1:16 p.m.0 views

CVE-2019-25711

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash...

6.9CVSS0.0001EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2026/04/12 12:28 p.m.2 views

CVE-2019-25711

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash...

6.9CVSS6AI score0.0001EPSS
Exploits1References2Affected Software1
CVE
CVE
added 2026/04/12 12:28 p.m.6 views

CVE-2019-25711

CVE-2019-25711 affects SpotFTP Password Recover 2.4.2. The vulnerability is a local, denial-of-service condition caused by accepting an oversized input in the Name field during registration, with a crafted 256-byte payload that crashes the application on submission. Public references (e.g., Explo...

6.9CVSS6AI score0.0001EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/12 12:28 p.m.0 views

CVE-2019-25711 SpotFTP Password Recover 2.4.2 Denial of Service via Name Field

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash...

6.9CVSS6AI score0.0001EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/04/12 12:28 p.m.21 views

CVE-2019-25711 SpotFTP Password Recover 2.4.2 Denial of Service via Name Field

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash...

6.9CVSS0.0001EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/12 12:0 a.m.1 views

PT-2026-32173

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash...

6.9CVSS6AI score0.0001EPSS
Exploits1References3
CNNVD
CNNVD
added 2026/04/12 12:0 a.m.2 views

Nsasoft SpotFTP Password Recover 安全漏洞

Nsasoft SpotFTP Password Recover is a tool developed by the NSASoft company in the United States, designed to recover saved account passwords from FTP clients. Version 2.4.2 of Nsasoft SpotFTP Password Recover contains a security vulnerability. This vulnerability stems from insufficient input...

6.9CVSS5.8AI score0.0001EPSS
Exploits1References2
NVD
NVD
added 2026/02/11 9:16 p.m.3 views

CVE-2020-37208

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service...

7.5CVSS0.00017EPSS
Exploits1References3
OSV
OSV
added 2026/02/11 9:16 p.m.2 views

CVE-2020-37209

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

7.5CVSS6AI score
Exploits0References3
NVD
NVD
added 2026/02/11 9:16 p.m.4 views

CVE-2020-37209

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

7.5CVSS0.00045EPSS
Exploits1References3
OSV
OSV
added 2026/02/11 9:16 p.m.1 views

CVE-2020-37208

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service...

7.5CVSS6.1AI score0.00017EPSS
Exploits1References3
CVE
CVE
added 2026/02/11 8:37 p.m.4 views

CVE-2020-37209

SpotFTP 3.0.0.0 contains a denial-of-service vulnerability in the Name field during registration. A crafted 1000-character payload can crash the application, indicating a buffer handling issue in the input for the registration name. The CVSS metrics show mixed assessments: CVSS v3.1 vector AV:N/A...

7.5CVSS5.8AI score0.00045EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2026/02/11 8:37 p.m.22 views

CVE-2020-37209 SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

7.5CVSS0.00045EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/02/11 8:37 p.m.3 views

CVE-2020-37209 SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

7.5CVSS5.8AI score0.00045EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/02/11 8:37 p.m.19 views

CVE-2020-37208 SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service...

7.5CVSS0.00017EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2026/02/11 8:37 p.m.2 views

CVE-2020-37208 SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service...

7.5CVSS6AI score0.00017EPSS
Exploits1References3
CVE
CVE
added 2026/02/11 8:37 p.m.5 views

CVE-2020-37208

CVE-2020-37208 affects SpotFTP 3.0.0.0. A buffer overflow in the registration key input field allows an attacker to crash the application with a 1000-character payload, leading to denial of service. The advisory provides CVSS metrics (4.6/7.5) and notes local/USER-A interaction: CVSSv4.0 indicate...

7.5CVSS6AI score0.00017EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2026/02/11 12:0 a.m.2 views

Nsasoft SpotFTP 缓冲区错误漏洞

Nsasoft SpotFTP is an FTP client password recovery tool developed by the US company Nsasoft. Version 3.0.0.0 of Nsasoft SpotFTP contains a buffer overflow vulnerability; this vulnerability stems from a buffer overflow in the registration key input field, which may cause the application to crash...

7.5CVSS6AI score0.00017EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2026/02/11 12:0 a.m.3 views

PT-2026-7707

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

7.5CVSS5.8AI score0.00045EPSS
Exploits1References4
Rows per page
Query Builder