Vendors / Nsasoft Records 51 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 4 CVSS 7.0–8.9
Exploited now Nsasoft records in CISA KEV No Nsasoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 64
SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration.
CVSS 4.0 MEDIUM 6.9· Local · No auth · No interaction · EPSS 0.00205 · Published 2026-04-12 · No fix listed CWE-807
Priority MEDIUM 60
SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application.
CVSS 4.0 MEDIUM 4.6· Local · No auth · User interaction · EPSS 0.00381 · Published 2026-02-11 · No fix listed CWE-120
Priority MEDIUM 60
SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application.
CVSS 4.0 MEDIUM 4.6· Local · No auth · User interaction · EPSS 0.00471 · Published 2026-02-11 · No fix listed CWE-787
Open these records in search → All records by CVSS severity
Critical0 High4 Medium47 Low0 No CVSS0