CVE-2020-37188

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

VendorProductVersions
NsasoftNsauditor SpotOutlook1.2.6

References

Timeline

Published
Feb 11, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-371897.5TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the applicatCVE-2020-37197.5Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. SCVE-2020-371907.5Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overCVE-2020-371917.5Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the applicatioCVE-2020-371926.2MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through CVE-2020-371937.5ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciouslCVE-2020-371947.5Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly lCVE-2020-371957.5BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the appliCVE-2020-371965.5Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oCVE-2020-371975.5Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing thCVE-2020-371987.5Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversiCVE-2020-371995.5NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. A
CVE-2020-37188: High severity, CVSS 7.5 | Vulnix