CVE-2020-37215

CVE-2020-37215 affects MSN Password Recovery version 1.30. The issue is a denial-of-service caused by an oversized input in the registration code field, where an attacker can paste a 9000-byte buffer of repeated characters into the "User Name and Registration Code" field to crash the application....

CVE-2020-37215 MSN Password Recovery 1.30 - Denial of Service

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the 'User Name and...

CVE-2020-37213

CVE-2020-37213 affects TextCrawler Pro 3.1.1. A denial-of-service vulnerability allows an attacker to crash the application by pasting an oversized 6000-byte payload into the activation/license key field, triggering a crash. Public references mention an exploit. The provided documents do not spec...

CVE-2020-37213 TextCrawler Pro3.1.1 - Denial of Service

TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized buffer in the license key field. Attackers can generate a 6000-byte payload and paste it into the activation field to trigger an application crash...

CVE-2020-37213 TextCrawler Pro3.1.1 - Denial of Service

TextCrawler Pro 3.1.1 contains a denial of service vulnerability that allows attackers to crash the application by sending an oversized buffer in the license key field. Attackers can generate a 6000-byte payload and paste it into the activation field to trigger an application crash...

CVE-2020-37212 SpotMSN 2.4.6 - 'Name' Denial of Service

SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37212 SpotMSN 2.4.6 - 'Name' Denial of Service

SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37212

CVE-2020-37212 affects SpotMSN 2.4.6. A denial-of-service vulnerability exists in the registration name input field; a 1000-character payload pasted into the Name field can crash the application. CVSS metrics are provided: v4.0 base 4.6 (LOCAL attack, no privileges, user interaction required) and...

CVE-2020-37210 SpotIE 2.9.5 - 'Key' Denial of Service

SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash...

CVE-2020-37211

SpotIM 2.2 contains a denial-of-service vulnerability where pasting a 1000-character payload into the registration Name field crashes the application. CVSS v3.1 base score 7.5 (NETWORK, HIGH, no user interaction) and CVSS v4.0 base score 4.6 (LOCAL, MEDIUM) are provided. Exploit references exist ...

CVE-2020-37211 SpotIM 2.2 - 'Name' Denial Of Service

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37211 SpotIM 2.2 - 'Name' Denial Of Service

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37209

SpotFTP 3.0.0.0 contains a denial-of-service vulnerability in the Name field during registration. A crafted 1000-character payload can crash the application, indicating a buffer handling issue in the input for the registration name. The CVSS metrics show mixed assessments: CVSS v3.1 vector AV:N/A...

CVE-2020-37209 SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37209 SpotFTP FTP Password Recovery 3.0.0.0 - 'Name' Denial of Service

SpotFTP 3.0.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37208 SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service...

CVE-2020-37208

CVE-2020-37208 affects SpotFTP 3.0.0.0. A buffer overflow in the registration key input field allows an attacker to crash the application with a 1000-character payload, leading to denial of service. The advisory provides CVSS metrics (4.6/7.5) and notes local/USER-A interaction: CVSSv4.0 indicate...

CVE-2020-37207 SpotDialup 1.6.7 - 'Key' Denial of Service

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash...

CVE-2020-37207 SpotDialup 1.6.7 - 'Key' Denial of Service

SpotDialup 1.6.7 contains a denial of service vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash...

CVE-2020-37207

CVE-2020-37207 affects SpotDialup 1.6.7 and describes a denial-of-service vulnerability in the registration key input field. A crafted 1000-character payload pasted into the Key field can trigger an application crash. The CVSS metrics indicate impact on availability and potential operational disr...