CVE-2020-37131

MediumCVSS 5.5/10Last modified Jun 29, 2026

Description

Nsauditor Product Key Explorer 4.2.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting a specially crafted registration key. Attackers can generate a payload of 1000 bytes of repeated characters and paste it into the 'Key' input field to trigger the application crash.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
Nsauditor	Product Key Explorer	4.2.2.0

References

http://www.nsauditor.comProduct
https://www.exploit-db.com/exploits/48284Exploit, VDB Entry
https://www.vulncheck.com/advisories/product-key-explorer-key-denial-of-serviceThird Party Advisory

Timeline

Published: Feb 5, 2026
Last modified: Jun 29, 2026
NVD status: Analyzed

Related CVEs from 2020

CVE-2020-371325.5UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in its password configuration properties that allows local attackers to CVE-2020-371337.5UltraVNC Launcher 1.2.4.0 contains a denial of service vulnerability in the Repeater Host configuration field that allows attackers to crash CVE-2020-371347.5UltraVNC Viewer 1.2.4.0 contains a denial of service vulnerability that allows attackers to crash the application by manipulating VNC Server CVE-2020-371357.5AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentia CVE-2020-371367.5ZOC Terminal 7.25.5 contains a denial of service vulnerability in the private key file input field that allows attackers to crash the applic CVE-2020-371379.8PHP-Fusion 9.03.50 contains a remote code execution vulnerability in the 'add_panel_form()' function that allows attackers to execute arbitr CVE-2020-371389.810-Strike Network Inventory Explorer 9.03 contains a buffer overflow vulnerability in the file import functionality that allows remote attac CVE-2020-371398.4Odin Secure FTP Expert 7.6.3 contains a local denial of service vulnerability that allows attackers to crash the application by manipulating CVE-2020-37147.8Adobe Illustrator CC versions 24.0 and earlier have a memory corruption vulnerability. Successful exploitation could lead to arbitrary code CVE-2020-371405.5Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the applicat CVE-2020-371418.2AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers CVE-2020-371428.410-Strike Network Inventory Explorer 8.54 contains a structured exception handler buffer overflow vulnerability that allows attackers to exe