CVE-2021-27722

MediumCVSS 5.5/10Last modified Jun 29, 2026

Description

An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.exploit-db.com/exploits/49590Not Applicable, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/49638Not Applicable, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/49590Not Applicable, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/49638Not Applicable, Third Party Advisory, VDB Entry

Timeline

Published: Nov 2, 2021
Last modified: Jun 29, 2026
NVD status: Analyzed

Related CVEs from 2021

CVE-2021-277309.8Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is F CVE-2021-277316.1Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed version is FTA_9_12_44 CVE-2021-277335.4In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.CVE-2021-277349.8Hirschmann HiOS 07.1.01, 07.1.02, and 08.1.00 through 08.5.xx and HiSecOS 03.3.00 through 03.5.01 allow remote attackers to change the crede CVE-2021-277366.5FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xm CVE-2021-277377.5Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.CVE-2021-277387.5All request mappings in `StreamingCoordinatorController.java` handling `/kylin/api/streaming_coordinator/*` REST API endpoints did not inclu CVE-2021-277419.1" Security vulnerability in HCL Commerce Management Center allowing XML external entity (XXE) injection"CVE-2021-277465.4"HCL Connections Security Update for Reflected Cross-Site Scripting (XSS) Vulnerability"CVE-2021-277513.3HCL Commerce is affected by an Insufficient Session Expiration vulnerability. After the session expires, in some circumstances, parts of the CVE-2021-277535.5"Sametime Android PathTraversal Vulnerability"CVE-2021-277555.5"Sametime Android potential path traversal vulnerability when using File class"