CVE-2020-37180

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

GTalk Password Finder 2.2.1 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-371819.8Torrent FLV Converter 1.51 Build 117 contains a stack overflow vulnerability that allows attackers to overwrite Structured Exception HandlerCVE-2020-371827.5Redir 3.3 contains a stack overflow vulnerability in the doproxyconnect() function that allows attackers to crash the application by sendingCVE-2020-371839.8Allok RM RMVB to AVI MPEG DVD Converter 3.6.1217 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by CVE-2020-371849.8Allok Video Converter 4.6.1217 contains a stack overflow vulnerability in the License Name input field that allows attackers to execute arbiCVE-2020-371857.5Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'NameCVE-2020-371869.8Chevereto 3.13.4 Core contains a remote code execution vulnerability that allows attackers to inject malicious code during database configurCVE-2020-371877.5SpotDialup 1.6.7 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applicatCVE-2020-371887.5SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the applicaCVE-2020-371897.5TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the applicatCVE-2020-37197.5Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. SCVE-2020-371907.5Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overCVE-2020-371917.5Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the applicatio
CVE-2020-37180: High severity, CVSS 7.5 | Vulnix