Approved changes feed: RSS · Atom
cpe:2.3:a:nsasoft:nsauditor:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nsasoft (60920eb3-36b1-556f-89ea-127a327b24d4) |
|---|---|
| Product | Nsauditor (2e30a76b-efda-5558-b145-5798e15f8549) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-47815 |
vulnerable | 2026-06-03 14:45:47.159495 |
Nsauditor 3.2.3 - Denial of Service (PoC)
HIGH (7.5)
Nsauditor 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.
Published: 2026-01-15T23:25:55.885Z
Updated: 2026-01-16T15:47:16.175Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37130 |
vulnerable | 2026-06-03 14:42:40.823746 |
Nsauditor 3.2.0.0 - 'Name' Denial of Service
HIGH (7.5)
Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.
Published: 2026-02-05T16:13:35.003Z
Updated: 2026-02-05T21:16:05.007Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37119 |
vulnerable | 2026-06-03 14:42:40.799657 |
Nsauditor 3.2.1.0 - Buffer Overflow (SEH+ASLR bypass (3 bytes overwrite))
CRITICAL (9.8)
Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious DNS query payload to trigger a three-byte overwrite, bypass ASLR, and execute shellcode through a carefully constructed exploit.
Published: 2026-02-05T16:13:30.470Z
Updated: 2026-04-07T14:05:18.864Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-25597 |
vulnerable | 2026-06-03 14:40:18.790951 |
NSauditor 3.1.2.0 Denial of Service via Community Field
MEDIUM (6.2)
NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a large payload into the Community field and trigger the Walk function to cause a denial of service condition.
Published: 2026-03-22T13:38:34.047Z
Updated: 2026-03-25T13:37:29.021Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25213 |
vulnerable | 2026-06-03 14:38:41.171085 |
Nsauditor 3.0.28.0 Local SEH Buffer Overflow
HIGH (8.4)
Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.
Published: 2026-03-26T13:24:14.608Z
Updated: 2026-03-26T14:46:20.591Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.