Nsasoft
Vulnerability activity for Nsasoft: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 31
- Critical (CVSS 9+)
- 1
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.2MediumApr 12, 2026Nsasoft blueauditor Memory corruptionCVE-2019-25712BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key value. Attackers can trigger a denial of service by entering a 256-byte buffer of repeated characters in the Key registration field, causing the application to crash during registration processing.
- 6.2MediumApr 12, 2026Nsasoft spotftp Denial of serviceCVE-2019-25711SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash when submitting the registration code.
- 6.2MediumApr 5, 2026Nsasoft spotauditor Memory corruptionCVE-2019-25666SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.
- 8.4HighMar 26, 2026Nsasoft nsauditor Memory corruptionCVE-2018-25213Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.
- 6.2MediumMar 22, 2026Nsasoft nsauditor Memory corruptionCVE-2019-25597NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a large payload into the Community field and trigger the Walk function to cause a denial of service condition.
- 6.2MediumMar 22, 2026Nsasoft spotauditor Denial of serviceCVE-2019-25596SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 repeated characters into the Name input during registration to trigger an application crash.
- 5.5MediumMar 21, 2026Nsasoft spotpaltalk Denial of serviceCVE-2019-25559SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK button is clicked.
- 7.5HighFeb 20, 2026Nsasoft spotauditor Memory corruptionCVE-2019-25434SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.
- 7.5HighFeb 12, 2026Nsasoft spotauditor Memory corruptionCVE-2019-25340SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.
- 8.4HighFeb 12, 2026Nsasoft spotauditor Memory corruptionCVE-2019-25336SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.
- 6.2MediumFeb 12, 2026Nsasoft product key explorer Memory corruptionCVE-2019-25334Product Key Explorer 4.2.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by overflowing the registration name input field. Attackers can create a specially crafted text file with repeated characters to trigger a buffer overflow when pasted into the registration name field, causing the application to crash.
- 7.5HighFeb 11, 2026Nsasoft spotmsn Memory corruptionCVE-2020-37212SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft spotim Memory corruptionCVE-2020-37211SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft spotie Memory corruptionCVE-2020-37210SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft spotftp Memory corruptionCVE-2020-37209SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft spotftp Memory corruptionCVE-2020-37208SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service.
- 7.5HighFeb 11, 2026Nsasoft spotdialup Memory corruptionCVE-2020-37207SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft sharealarmpro Memory corruptionCVE-2020-37206ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.
- 7.5HighFeb 11, 2026Nsasoft remshutdown Memory corruptionCVE-2020-37205RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft remshutdown Memory corruptionCVE-2020-37204RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft netsharewatcher Memory corruptionCVE-2020-37201NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft netsharewatcher Memory corruptionCVE-2020-37200NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the application by supplying oversized input. Attackers can generate a 1000-character payload and paste it into the registration key field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft nbmonitor Memory corruptionCVE-2020-37199NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft domain name search software Memory corruptionCVE-2020-37197Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash.
- 7.5HighFeb 11, 2026Nsasoft domain name search software Memory corruptionCVE-2020-37196Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
- 6.2MediumFeb 5, 2026Nsasoft product key explorer Memory corruptionCVE-2020-37131Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration key. Attackers can generate a payload of 1000 bytes of repeated characters and paste it into the 'Key' input field to trigger the application crash.
- 7.5HighFeb 5, 2026Nsasoft nsauditor Memory corruptionCVE-2020-37130Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.
- 9.8CriticalFeb 5, 2026Nsasoft nsauditor Memory corruptionCVE-2020-37119Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a carefully constructed exploit.
- 7.5HighJan 23, 2026Nsasoft nsauditor Denial of serviceCVE-2021-47895Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Event Description field with a large buffer. Attackers can generate a 10,000-character 'U' buffer and paste it into the Event Description field to trigger an application crash.
- 7.5HighJan 16, 2026Nsasoft nsauditor Memory corruptionCVE-2021-47815Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.
- 7.5HighJan 16, 2026Nsasoft nbmonitor Memory corruptionCVE-2021-47814NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a 256-character buffer into the registration key field to trigger an application crash and potential system instability.
Top products
- nsauditor6 CVEs in the last year, 1 critical
- spotauditor5 CVEs in the last year
- spotftp3 CVEs in the last year
- remshutdown2 CVEs in the last year
- product key explorer2 CVEs in the last year
- netsharewatcher2 CVEs in the last year
- nbmonitor2 CVEs in the last year
- domain name search software2 CVEs in the last year
- spotpaltalk1 CVE in the last year
- spotmsn1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.