29
CVEs
1
Critical
3
High
0
KEV
29
PoC
4
Unpatched C/H
0.0%
Patch Rate
0.1%
Avg EPSS
Severity Breakdown
CRITICAL
1
HIGH
3
MEDIUM
25
LOW
0
Monthly CVE Trend
Affected Products (16)
Top Risky CVEs
| CVE | Summary | Severity | CVSS | EPSS | Priority | Signals |
|---|---|---|---|---|---|---|
| CVE-2020-37119 | Stack-based buffer overflow in Nsauditor Network Auditing Tool 3.0.28 and 3.2.1.0 in the DNS Lookup tool allows attackers to execute arbitrary code via crafted input. PoC available. | CRITICAL | 9.8 | 0.0% | 69 |
PoC
No patch
|
| CVE-2019-25336 | SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. [CVSS 8.4 HIGH] | HIGH | 8.4 | 0.0% | 62 |
PoC
No patch
|
| CVE-2021-47895 | Nsauditor versions up to 3.2.2.0 is affected by allocation of resources without limits or throttling (CVSS 7.5). | HIGH | 7.5 | 0.1% | 58 |
PoC
No patch
|
| CVE-2019-25340 | SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. [CVSS 7.5 HIGH] | HIGH | 7.5 | 0.0% | 58 |
PoC
No patch
|
| CVE-2019-25434 | SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. [CVSS 7.5 HIGH] | MEDIUM | 6.7 | 0.1% | 54 |
PoC
No patch
|
| CVE-2020-37130 | Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. [CVSS 7.5 HIGH] | MEDIUM | 6.7 | 0.0% | 54 |
PoC
No patch
|
| CVE-2021-47814 | NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a 256-character buffer into the registration key field to trigger an application crash and potential system instability. [CVSS 7.5 HIGH] | MEDIUM | 6.7 | 0.0% | 54 |
PoC
No patch
|
| CVE-2021-47815 | Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash. [CVSS 7.5 HIGH] | MEDIUM | 6.7 | 0.0% | 54 |
PoC
No patch
|
| CVE-2020-37131 | Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration key. [CVSS 6.2 MEDIUM] | MEDIUM | 6.7 | 0.0% | 54 |
PoC
No patch
|
| CVE-2019-25334 | Product Key Explorer 4.2.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by overflowing the registration name input field. [CVSS 6.2 MEDIUM] | MEDIUM | 6.7 | 0.0% | 54 |
PoC
No patch
|
| CVE-2021-27722 | An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 1.3% | 49 |
PoC
No patch
|
| CVE-2024-0771 | A vulnerability has been found in Nsasoft Product Key Explorer 4.0.9 and classified as problematic. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.3% | 48 |
PoC
No patch
|
| CVE-2024-0772 | A vulnerability was found in Nsasoft ShareAlarmPro 2.1.4 and classified as problematic. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.4% | 48 |
PoC
No patch
|
| CVE-2024-1184 | A vulnerability was found in Nsasoft Network Sleuth 3.0.0.0. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.4% | 48 |
PoC
No patch
|
| CVE-2024-1185 | A vulnerability classified as problematic has been found in Nsasoft NBMonitor Network Bandwidth Monitor 1.6.5.0. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available. | MEDIUM | 5.5 | 0.4% | 48 |
PoC
No patch
|