{"id":"CVE-2020-37190","state":"PUBLISHED","title":"Top Password Firefox Password Recovery 2.8 - Denial of Service","description":"Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields.","publishedAt":"2026-02-11T20:37:12.041Z","updatedAt":"2026-02-12T16:02:11.727Z","severity":{"score":4.6,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["Top Password Software Top Password Firefox Password Recovery"],"affected":[{"vendor":"Top Password Software","product":"Top Password Firefox Password Recovery","versions":[{"version":"2.8","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/47912","https://www.top-password.com/","https://www.vulncheck.com/advisories/top-password-firefox-password-recovery-denial-of-service"],"weaknesses":["CWE-120"],"ingestedAt":"2026-10-29T19:47:27.394Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2020/37xxx/CVE-2020-37190.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2020-37190","state":"PUBLISHED","datePublished":"2026-02-11T20:37:12.041Z","dateUpdated":"2026-02-12T16:02:11.727Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-02-10T18:42:34.901Z"},"containers":{"cna":{"title":"Top Password Firefox Password Recovery 2.8 - Denial of Service","descriptions":[{"lang":"en","value":"Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields."}],"affected":[{"vendor":"Top Password Software","product":"Top Password Firefox Password Recovery","versions":[{"version":"2.8","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/47912","name":"ExploitDB-47912","tags":["exploit"]},{"url":"https://www.top-password.com/","name":"Vendor Homepage","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/top-password-firefox-password-recovery-denial-of-service","name":"VulnCheck Advisory: Top Password Firefox Password Recovery 2.8 - Denial of Service","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":4.6,"baseSeverity":"MEDIUM","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"ACTIVE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"LOW","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","lang":"en","description":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-02-11T20:37:12.041Z"},"datePublic":"2020-01-12T00:00:00.000Z","credits":[{"lang":"en","value":"Antonio de la Piedra","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-02-12T16:02:00.455864Z","id":"CVE-2020-37190","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-12T16:02:11.727Z"}}]}}}