CVE-2021-27722

CVE-2021-27722 affects Nsasoft US LLC SpotAuditor 5.3.5. The vulnerability is that entering 300 bytes of characters into the “Key” or “Name” field during registration can crash the program, yielding a denial of service. The available connected sources corroborate the crash/vulnerability existence...

CVE-2019-25340

SpotAuditor 5.3.2 contains a denial of service in the Base64 decryption feature. An attacker can crash the application by supplying a malformed input file consisting of 2000 repeated characters, which triggers a crash when pasted into the Base64 Encrypted Password field. The CVSS metrics indicate...

CVE-2019-25434

SpotAuditor 5.3.1.0 contains a denial-of-service vulnerability where unauthenticated attackers can crash the application by submitting excessively long data in the registration name field. Specifically, entering a large string (5000 bytes or more) triggers an unhandled exception. Exploitation sta...

CVE-2019-25596

SpotAuditor 5.2.6 contains a local denial-of-service vulnerability in the registration dialog: an excessively long Name input (e.g., 300 repeated characters) can crash the application. CVE-2019-25596 has a CVSS v3.1 base score of 6.2 (MEDIUM) and CVSS v4.0 base score of 6.9 (MEDIUM), with impact ...

CVE-2019-25336

SpotAuditor 5.3.2 contains a local buffer overflow in the Base64 Encrypted Password tool that can trigger an SEH overwrite and allow execution of shellcode on a vulnerable system. Affected component: Base64 Encrypted Password tool within SpotAuditor. Underlying cause: buffer overflow via crafted ...

CVE-2019-25666

SpotAuditor 3.6.7 contains a local buffer overflow in the Base64 Password Decoder component that allows an attacker to crash the application by supplying an oversized Base64 string to the decoder interface, resulting in a denial of service. The vulnerability is locally exploitable with no user in...