Approved changes feed: RSS · Atom

cpe:2.3:a:nsasoft:spotauditor:5.3.2:*:*:*:*:*:*:*

part: a version: 5.3.2 update: *

VendorNsasoft (60920eb3-36b1-556f-89ea-127a327b24d4)
ProductSpotauditor (b8e1c52d-18e1-5d59-9554-71c6a19f9a46)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25340 vulnerable 2026-06-03 14:40:18.370949 SpotAuditor 5.3.2 - 'Base64' Denial Of Service
HIGH (7.5)
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.
Published: 2026-02-12T22:48:48.045Z
Updated: 2026-03-05T01:26:12.041Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-25336 vulnerable 2026-06-03 14:40:18.365075 SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)
HIGH (8.4)
SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.
Published: 2026-02-12T22:48:45.169Z
Updated: 2026-03-05T01:26:10.539Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.