Read the docs

Nsasoft

Records51All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Nsasoft records in CISA KEV

No Nsasoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Spotauditor · all components

Priority HIGH 72

SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00246 Published 2026-02-12 No fix listed CWE-121
Priority HIGH 69

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00364 Published 2026-02-20 No fix listed CWE-121
Priority HIGH 69

SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.0049 Published 2026-02-12 No fix listed CWE-121
Priority MEDIUM 64

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00246 Published 2026-04-05 No fix listed CWE-787
Priority MEDIUM 64

SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00199 Published 2026-03-22 No fix listed CWE-1287
Open these records in search →