What’s Vulnerable › Vulnerabilities

CVE-2020-37190: Top Password Firefox Password Recovery 2.8 - Denial of Service

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-11 · updated 2026-06-17
• Weakness: CWE-120

Description

Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields.

Affected products

• Top Password Software Top Password Firefox Password Recovery: 2.8

References

• https://www.exploit-db.com/exploits/47912
• https://www.top-password.com/
• https://www.vulncheck.com/advisories/top-password-firefox-password-recovery-denial-of-service

Get alerted when CVE-2020-37190 or the next vulnerability affects your stack