Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Nsasoft

First CVE: Nov 2, 2021Active for: 5 yearsTotal CVEs: 36
27.7
VTI Score
Low

Nsasoft develops a narrow portfolio of system-auditing and file-management utilities, including products such as NSAuditor, SpotAuditor, and Product Key Explorer, that operate at the host level with direct access to memory and system resources. The vendor's vulnerability profile centers on memory-safety weakness classes, particularly classic buffer overflows, stack-based buffer overflows, out-of-bounds writes, and improper memory-buffer handling, which are characteristic of native-code utilities that parse system data and file structures. A meaningful share of the vendor's disclosures reach serious severity, reflecting the privileged execution context and direct memory access that these tools require. Defenders should treat this vendor's advisories as relevant to environments where these system-assessment tools are deployed, particularly in administrative and security-audit workflows; live severity, exploitation, and exposure counts are shown alongside this summary.

FAUCET AI Generated
36
Total CVEs
More Total CVEs than 98% of tracked vendors
0.7
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 10% of tracked vendors
7.0
Avg CVSS Score
Higher Avg CVSS Score than 49% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Nsasoft over time

Volume of CVEsAvg CVSS Base Score
First CVE
Nov 2, 2021
4 years ago
Most Recent CVE
Apr 12, 2026
103 days ago

Products(17 total)

Top CVEs

Signals from CVEs in this vendor scope (36 CVEs).

36 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2021-47814HIGH
NBMonitor 1.6.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the registration code input field. Attackers can paste a 25
Jan 16, 20267.530NONO
CVE-2018-25213HIGH
Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the
Mar 26, 20268.429NONO
CVE-2020-37119CRITICAL
Nsauditor 3.0.28 and 3.2.1.0 contains a buffer overflow vulnerability in the DNS Lookup tool that allows attackers to execute arbitrary code by overwriting memory. Attackers can cr
Feb 5, 20269.829NONO
CVE-2019-25434HIGH
SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name
Feb 20, 20267.526NONO
CVE-2020-37212HIGH
SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-characte
Feb 11, 20267.526NONO
CVE-2020-37211HIGH
SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can gener
Feb 11, 20267.526NONO
CVE-2020-37210HIGH
SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer
Feb 11, 20267.526NONO
CVE-2020-37208HIGH
SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character
Feb 11, 20267.526NONO
CVE-2020-37207HIGH
SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-charac
Feb 11, 20267.526NONO
CVE-2020-37206HIGH
ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-ch
Feb 11, 20267.526NONO
View all 36 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products36 CVEs
39%
58%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local14 (38.9%)
Network22 (61.1%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low36 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None35 (97.2%)
Unknown0 (0.0%)
Required1 (2.8%)
Privileges Required
Low5 (13.9%)
High0 (0.0%)
None31 (86.1%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (36 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Nsasoft.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Nsasoft — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Nsasoft's Products

View all 3 CNAs →

Top CWEs