Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Nsasoft Component: Spotftp Clear all filters
TI-2019-15763 CVE-2019-25711 · GHSA-7wj7-w87x-q3q3

SpotFTP Password Recover 2.4.2 Denial of Service via Name Field

Priority MEDIUM 64

SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration.

CVSS 4.0MEDIUM 6.9 Local No auth No interaction EPSS 0.00205 Published 2026-04-12 No fix listed CWE-807
TI-2020-19344 CVE-2020-37209 · GHSA-3745-9rxm-69m7

SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service

Priority MEDIUM 60

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00381 Published 2026-02-11 No fix listed CWE-120
TI-2020-19343 CVE-2020-37208 · GHSA-35f2-992w-gmjg

SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service

Priority MEDIUM 60

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application.

CVSS 4.0MEDIUM 4.6 Local No auth User interaction EPSS 0.00471 Published 2026-02-11 No fix listed CWE-787