CVE-2020-37189

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration field to trigger an application crash.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-37197.5Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have an sql injection vulnerability. SCVE-2020-371907.5Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overCVE-2020-371917.5Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the applicatioCVE-2020-371926.2MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through CVE-2020-371937.5ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciouslCVE-2020-371947.5Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly lCVE-2020-371957.5BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the appliCVE-2020-371965.5Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oCVE-2020-371975.5Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing thCVE-2020-371987.5Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversiCVE-2020-371995.5NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. ACVE-2020-37208.8Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary code