Total
4 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2021-47895 | 1 Nsasoft | 1 Nsauditor | 2026-02-11 | N/A | 7.5 HIGH |
|
Nsauditor 3.2.2.0 contains a denial of service vulnerability that allows attackers to crash the application by overwriting the Event Description field with a large buffer. Attackers can generate a 10,000-character 'U' buffer and paste it into the Event Description field to trigger an application crash.
|
|||||
| CVE-2020-37130 | 1 Nsasoft | 1 Nsauditor | 2026-02-09 | N/A | 7.5 HIGH |
|
Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.
|
|||||
| CVE-2020-37119 | 1 Nsasoft | 1 Nsauditor | 2026-02-09 | N/A | 9.8 CRITICAL |
|
Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a carefully constructed exploit.
|
|||||
| CVE-2021-47815 | 1 Nsasoft | 1 Nsauditor | 2026-01-21 | N/A | 7.5 HIGH |
|
Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.
|
|||||