This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2019-25596 | BDVDB-2026-321850 Detail

NsauditorSpotAuditor

Description#

SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 repeated characters into the Name input during registration to trigger an application crash.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: local.

Weaknesses#

  • CWE-1287 Improper Validation of Specified Type of Input

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.