Approved changes feed: RSS · Atom

cpe:2.3:a:nsasoft:spotftp:3.0.0.0:*:*:*:*:*:*:*

part: a version: 3.0.0.0 update: *

VendorNsasoft (60920eb3-36b1-556f-89ea-127a327b24d4)
ProductSpotftp (02a16f79-d312-5841-b012-e7066d87e019)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-37209 vulnerable 2026-06-03 14:42:40.991895 SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service
HIGH (7.5)
SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash.
Published: 2026-02-11T20:37:28.215Z
Updated: 2026-02-12T16:04:16.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-37208 vulnerable 2026-06-03 14:42:40.991475 SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service
HIGH (7.5)
SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service.
Published: 2026-02-11T20:37:27.442Z
Updated: 2026-02-12T14:46:02.829Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.