<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: nsasoft</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2019-25712: BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local a</title><link>https://patchthecve.com/cve/CVE-2019-25712.html</link><guid>https://patchthecve.com/cve/CVE-2019-25712.html</guid><pubDate>Wed, 17 Jun 2026 02:33:01 +0000</pubDate><description>MEDIUM 6.2: BlueAuditor 1.7.2.0 contains a buffer overflow vulnerability in the registration key field that allows local attackers to crash the application by submitting an oversized key value. Attackers can trigger a denial of service by entering a 256-byte buffer of repeated characters in the Key registration</description></item><item><title>CVE-2019-25711: SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash</title><link>https://patchthecve.com/cve/CVE-2019-25711.html</link><guid>https://patchthecve.com/cve/CVE-2019-25711.html</guid><pubDate>Wed, 17 Jun 2026 02:33:01 +0000</pubDate><description>MEDIUM 6.2: SpotFTP Password Recover 2.4.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an oversized buffer in the Name field during registration. Attackers can generate a 256-byte payload, paste it into the Name input field, and trigger a crash wh</description></item><item><title>CVE-2019-25666: SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that</title><link>https://patchthecve.com/cve/CVE-2019-25666.html</link><guid>https://patchthecve.com/cve/CVE-2019-25666.html</guid><pubDate>Fri, 24 Jul 2026 22:10:00 +0000</pubDate><description>MEDIUM 6.2: SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.</description></item><item><title>CVE-2018-25213: Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local at</title><link>https://patchthecve.com/cve/CVE-2018-25213.html</link><guid>https://patchthecve.com/cve/CVE-2018-25213.html</guid><pubDate>Wed, 17 Jun 2026 01:54:59 +0000</pubDate><description>HIGH 8.4: Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field</description></item><item><title>CVE-2019-25597: NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows loc</title><link>https://patchthecve.com/cve/CVE-2019-25597.html</link><guid>https://patchthecve.com/cve/CVE-2019-25597.html</guid><pubDate>Wed, 07 Oct 2026 08:10:00 +0000</pubDate><description>MEDIUM 6.2: NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a large payload into the Community field and trigger the Walk function to cause a denial of</description></item><item><title>CVE-2019-25596: SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local atta</title><link>https://patchthecve.com/cve/CVE-2019-25596.html</link><guid>https://patchthecve.com/cve/CVE-2019-25596.html</guid><pubDate>Wed, 17 Jun 2026 02:32:45 +0000</pubDate><description>MEDIUM 6.2: SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 repeated characters into the Name input during registration to t</description></item></channel></rss>