CVE-2020-37191

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting a large 5000-character payload into the User Name and Registration Code input fields.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Feb 11, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2020

CVE-2020-371926.2MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through CVE-2020-371937.5ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciouslCVE-2020-371947.5Backup Key Recovery 2.2.5 contains a denial of service vulnerability that allows attackers to crash the application by supplying an overly lCVE-2020-371957.5BlueAuditor 1.7.2.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the appliCVE-2020-371965.5Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oCVE-2020-371975.5Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by overflowing thCVE-2020-371987.5Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversiCVE-2020-371995.5NBMonitor 1.6.6.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. ACVE-2020-37208.8Adobe Framemaker versions 2019.0.4 and below have an out-of-bounds write vulnerability. Successful exploitation could lead to arbitrary codeCVE-2020-372005.5NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration key input that allows attackers to crash the applicatioCVE-2020-372015.5NetShareWatcher 1.5.8.0 contains a buffer overflow vulnerability in the registration name input that allows attackers to crash the applicatiCVE-2020-372027.5NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized re
CVE-2020-37191: High severity, CVSS 7.5 | Vulnix