Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 8

Export CSV
CVE-2019-25477

RAR Password Recovery 1.80 Denial of Service Buffer Overflow

RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration Code field to trigger an application crash.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Krylack Top Password Software
Products
Rar Password Recovery Rar Password Recovery
CVE-2019-25476

Outlook Password Recovery 2.10 Denial of Service Buffer Overflow

Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can create a malicious text file containing 6000 bytes of data and paste it into the User Name and Registration Code field to trigger a denial of service condition.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Top Password Software
Products
Outlook Password Recovery
CVE-2019-25475

SQL Server Password Changer 1.90 Denial of Service Buffer Overflow

SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can inject 6000 bytes of data into the User Name and Registration Code field to trigger a denial of service condition.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Top Password Software
Products
Sql Server Password Changer
CVE-2020-37192

MSN Password Recovery 1.30 - XML External Entity Injection

MSN Password Recovery 1.30 contains an XML external entity injection vulnerability that allows attackers to read local system files through crafted XML input. Attackers can exploit the 'Favorites' tab by injecting a malicious XML file that references external entities to retrieve sensitive system configuration information.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Password-solutions Top Password Software
Products
Office Password Recovery Msn Password Recovery
CVE-2020-37193

ZIP Password Recovery 2.30 - 'ZIP File' Denial of Service

ZIP Password Recovery 2.30 contains a denial of service vulnerability that allows attackers to crash the application by providing maliciously crafted input. Attackers can create a specially prepared text file with specific characters to trigger an application crash when selecting a ZIP file.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Krylack Top Password Software
Products
Zip Password Recovery Zip Password Recovery
CVE-2020-37215

MSN Password Recovery 1.30 - Denial of Service

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the 'User Name and Registration Code' field to trigger an application crash.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Password-solutions Top Password Software
Products
Office Password Recovery Msn Password Recovery
CVE-2020-37190

Top Password Firefox Password Recovery 2.8 - Denial of Service

Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Top Password Software
Products
Top Password Firefox Password Recovery
CVE-2020-37191

Top Password Software Dialup Password Recovery 1.30 - Denial of Service

Top Password Software Dialup Password Recovery 1.30 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting a large 5000-character payload into the User Name and Registration Code input fields.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Top Password Software
Products
Top Password Software Dialup Password Recovery