What’s Vulnerable › Vulnerabilities

CVE-2020-37188: SpotOutlook 1.2.6 - 'Name' Denial of Service

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-11 · updated 2026-06-17
• Weakness: CWE-120

Description

SpotOutlook 1.2.6 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can overwrite the buffer by pasting 1000 'A' characters into the 'Name' field, causing the application to become unresponsive.

Affected products

• Nsasoft Nsauditor SpotOutlook: 1.2.6

References

• http://www.nsauditor.com/
• https://www.exploit-db.com/exploits/47906
• https://www.vulncheck.com/advisories/spotoutlook-name-denial-of-service

Get alerted when CVE-2020-37188 or the next vulnerability affects your stack