21 matches found
CVE-2025-20272
creationtimestamp| type| source ---|---|--- 2026-06-29 17:31:14+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpgzdmybk62o...
CVE-2017-20272
creationtimestamp| type| source ---|---|--- 2026-06-19 18:44:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monyriwmsw2k...
CVE-2017-20272
Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the sfselectuserid parameter. Attackers can send GET requests to index.php with the option=comupl and...
EUVD-2021-20272
Malware in sbrugna...
CVE-2025-20272
A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, low-privileged, remote attacker to conduct a blind SQL injection attack. This vulnerability is due to insufficient validation of user-supplied...
CVE-2022-20272
In PermissionController, there is a possible misunderstanding about the default SMS application's permission set due to misleading text. This could lead to local information disclosure with User privileges needed. User interaction is needed for exploitation.Product: AndroidVersions:...
Cisco Unity Connection Arbitrary File Upload (cisco-sa-cuc-unauth-afu-FROYsCsD)
According to its self-reported version, Cisco Unity Connection running on the report host is affected by an Arbitrary File Upload Vulnerability. Due to lack of authentication in a specific API and improper validation of user-supplied data, an unauthenticated, remote attacker can store malicious...
CVE-2024-20272
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system and execute commands on the underlying operating system. This vulnerability is due to a lack of authentication in a...
CVE-2024-20272
CVE-2024-20272 affects Cisco Unity Connection. An unauthenticated attacker can exploit a lack of authentication in a specific API and improper validation to upload arbitrary files, potentially storing malicious files, executing commands on the underlying OS, and elevating privileges to root. Cisc...
CVE-2024-20272
creationtimestamp| type| source ---|---|--- 2024-01-11 05:58:53+00:00| seen| https://t.me/thehackernews/4381 2024-01-11 06:58:45+00:00| seen| Telegram/NHqLzGMxSWWaxh4qv5hvBRz6nYsonlkC4FDVcGtBa4JQ 2024-01-11 07:26:15+00:00| seen| https://t.me/KomunitiSiber/1322 2024-01-11 07:51:25+00:00| seen|...
Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software
Cisco has released software updates to address a critical security flaw impacting Unity Connection that could permit an adversary to execute arbitrary commands on the underlying system. Tracked as CVE-2024-20272 CVSS score: 7.3, the vulnerability is an arbitrary file upload bug residing in the...
CVE-2023-20272
Cisco Identity Services Engine (ISE) is affected by an arbitrary file write vulnerability in its web-based management interface. The issue stems from insufficient file input validation, allowing an authenticated, remote attacker to upload a malicious file to the web root and potentially replace f...
CVE-2019-20272
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during the year 2019. Notes: none...
CVE-2022-20272
CVE-2022-20272 affects Android 13 and is tied to the PermissionController component. The issue stems from misleading text about the default SMS app’s permission set, which could lead to local information disclosure. Impact is limited to information exposure with user privileges required and explo...
USN-4886-1: Privoxy vulnerabilities
It was discovered that Privoxy incorrectly handled CGI requests. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. CVE-2020-35502, CVE-2021-20209, CVE-2021-20210, CVE-2021-20213, CVE-2021-20215, CVE-2021-20216, CVE-2021-20217, CVE-2021-20272,...
openSUSE Security Update : privoxy (openSUSE-2021-443)
This update for privoxy fixes the following issues : Update to version 3.0.32 : - Security/Reliability boo1183129 - ssplit: Remove an assertion that could be triggered with a crafted CGI request. Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272 Reported by: Joshua Rogers Opera - cgisendbanne...
[SECURITY] [DLA 2587-1] privoxy security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2587-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 09, 2021 https://wiki.debian.org/LTS -...
CVE-2021-20272
creationtimestamp| type| source ---|---|--- 2021-03-09 16:51:37+00:00| seen| https://t.me/cibsecurity/24589...
CVE-2021-20272
Privoxy (before 3.0.32) is affected by an assertion-failure vulnerability that can cause a server crash when processing constructed CGI requests (CVE-2021-20272). Multiple connected advisories confirm this issue and link it to crafted CGI inputs that trigger crashes (and related CVEs in the same ...
