CVE-2020-37215 MSN Password Recovery 1.30 - Denial of Service

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the 'User Name and...

CVE-2020-37212 SpotMSN 2.4.6 - 'Name' Denial of Service

SpotMSN 2.4.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37211 SpotIM 2.2 - 'Name' Denial Of Service

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37210

CVE-2020-37210 affects SpotIE 2.9.5. A denial-of-service condition is triggered by the registration key input: pasting a 1000-character buffer payload into the Key field crashes the application. Impact is limited to availability (application crash) as described; local exploitation is indicated in...

CVE-2020-37211

SpotIM 2.2 contains a denial-of-service vulnerability where pasting a 1000-character payload into the registration Name field crashes the application. CVSS v3.1 base score 7.5 (NETWORK, HIGH, no user interaction) and CVSS v4.0 base score 4.6 (LOCAL, MEDIUM) are provided. Exploit references exist ...

CVE-2020-37211 SpotIM 2.2 - 'Name' Denial Of Service

SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash...

CVE-2020-37210 SpotIE 2.9.5 - 'Key' Denial of Service

SpotIE 2.9.5 contains a denial of service vulnerability in the registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the 'Key' field to trigger an application crash...

CVE-2020-37208

CVE-2020-37208 affects SpotFTP 3.0.0.0. A buffer overflow in the registration key input field allows an attacker to crash the application with a 1000-character payload, leading to denial of service. The advisory provides CVSS metrics (4.6/7.5) and notes local/USER-A interaction: CVSSv4.0 indicate...

CVE-2020-37208 SpotFTP FTP Password Recovery 3.0.0.0 - 'Key' Denial of Service

SpotFTP 3.0.0.0 contains a buffer overflow vulnerability in the registration key input field that allows attackers to crash the application. Attackers can generate a 1000-character payload and paste it into the 'Key' field to trigger an application crash and denial of service...

CVE-2020-37207

CVE-2020-37207 affects SpotDialup 1.6.7 and describes a denial-of-service vulnerability in the registration key input field. A crafted 1000-character payload pasted into the Key field can trigger an application crash. The CVSS metrics indicate impact on availability and potential operational disr...

CVE-2020-37206

CVE-2020-37206 affects ShareAlarmPro Advanced Network Access Control. The vulnerability is a denial-of-service triggered by an oversized registration key, with documented proof-of-concept payloads around a 1000-character buffer that can crash the application when pasted into the registration key ...

CVE-2020-37206 ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service

ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field...

CVE-2020-37206 ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service

ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field...

CVE-2020-37205

RemShutdown 2.9.0.0 contains a denial-of-service vulnerability caused by overflowing the registration field named “Name.” A 1000-character payload pasted into the Name field can crash the application. CVSS data shows conflicting metrics (4.0/4.6: Medium, local access, user interaction; 3.1/7.5: H...

CVE-2020-37204 RemShutdown 2.9.0.0 - 'Key' Denial of Service

RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash...

CVE-2020-37204

RemShutdown 2.9.0.0 contains a denial-of-service vulnerability in the registration key input. Attackers can paste a 1000-character payload into the registration key field to trigger an application crash, causing a local DoS. The provided metrics show CVSS v3.1 base score 7.5 (Network, Low complex...

CVE-2020-37205 RemShutdown 2.9.0.0 - 'Name' Denial of Service

RemShutdown 2.9.0.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' registration field. Attackers can generate a 1000-character buffer payload and paste it into the registration name field to trigger an application crash...

CVE-2020-37204 RemShutdown 2.9.0.0 - 'Key' Denial of Service

RemShutdown 2.9.0.0 contains a denial of service vulnerability in its registration key input that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash...

CVE-2020-37203 Office Product Key Finder 1.5.4 - Denial of Service

Office Product Key Finder 1.5.4 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the registration code input. Attackers can create a specially crafted text file and paste it into the 'Name and Key' field to trigger an application crash...

CVE-2020-37202 NetworkSleuth 3.0.0.0 - 'Key' Denial of Service

NetworkSleuth 3.0.0.0 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash...