VYPR
Vendor

Nsasoft

Products
17
CVEs
36
Across products
40
Status
Private

Products

17

Recent CVEs

36
View all 36 CVEs →
  • CVE-2020-37119CriFeb 5, 2026
    risk 0.64cvss 9.8epss 0.01

    Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute…

  • CVE-2018-25213HigMar 26, 2026
    risk 0.55cvss 8.4epss 0.00

    Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode…

  • CVE-2019-25336HigFeb 12, 2026
    risk 0.55cvss 8.4epss 0.00

    SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured…

  • CVE-2019-25434HigFeb 20, 2026
    risk 0.49cvss 7.5epss 0.00

    SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field…

  • CVE-2019-25340HigFeb 12, 2026
    risk 0.49cvss 7.5epss 0.00

    SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application…

  • CVE-2020-37212HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.

  • CVE-2020-37211HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.

  • CVE-2020-37210HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.

  • CVE-2020-37209HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.

  • CVE-2020-37208HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service.

  • CVE-2020-37207HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.

  • CVE-2020-37206HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.

  • CVE-2020-37205HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an…

  • CVE-2020-37204HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.

  • CVE-2020-37201HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.

  • CVE-2020-37200HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying oversized input. Attackers can generate a 1000-character payload and paste it into the registration key field to trigger an…

  • CVE-2020-37199HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.

  • CVE-2020-37197HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an…

  • CVE-2020-37196HigFeb 11, 2026
    risk 0.49cvss 7.5epss 0.00

    Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger…

  • CVE-2020-37130HigFeb 5, 2026
    risk 0.49cvss 7.5epss 0.00

    Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the…