Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-25336 1 Nsasoft 1 Nsauditor Spotauditor 2026-02-13 8.4 High
SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.
CVE-2019-25340 1 Nsasoft 1 Nsauditor Spotauditor 2026-02-13 7.5 High
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.