Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Priority MEDIUM 64

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00246 Published 2026-04-05 No fix listed CWE-787
Priority MEDIUM 64

SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00203 Published 2026-03-22 No fix listed CWE-1287
Priority HIGH 69

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00364 Published 2026-02-20 No fix listed CWE-121
Priority HIGH 69

SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer.

CVSS 4.0MEDIUM 6.7 Local No auth User interaction EPSS 0.00502 Published 2026-02-12 No fix listed CWE-121
Priority HIGH 72

SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload.

CVSS 4.0HIGH 8.4 Local No auth User interaction EPSS 0.00251 Published 2026-02-12 No fix listed CWE-121