CVE Feed

    Dashboard / CVE / CVE-2021-27722

    CVE-2021-27722

    An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.

    Published:Nov 2, 2021
    Last Modified:Nov 21, 2024
    EPS:Nov 2, 2021
    EPSS Score:0.00738
    CVSS Score:7.5

    Affected Products

    Vendor
    Nsasoft
    Product
    Spotauditor

    Exploits

    No exploit reference

    Related CVEs

    CVE-2019-25666 (CVSS 6.9) — SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that…
    CVE-2019-25596 (CVSS 6.9) — SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local atta…
    CVE-2019-25434 (CVSS 6.7) — SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash …
    CVE-2019-25340 (CVSS 6.7) — SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows atta…
    CVE-2019-25336 (CVSS 8.4) — SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that al…
    CVE-2020-37195 (CVSS 4.6) — BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allow…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High