Lucene search
K

17 matches found

Cvelist
Cvelist
added 2025/06/04 4:18 p.m.16 views

CVE-2025-20276 Cisco Unified Contact Center Express Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insecure...

3.8CVSS0.00362EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/04 4:18 p.m.7 views

CVE-2025-20276 Cisco Unified Contact Center Express Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, remote attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insecure...

3.8CVSS5.2AI score0.00362EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:36 a.m.6 views

CVE-2022-20276

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

5.5CVSS6AI score0.00095EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/04/03 12:0 a.m.18 views

Cisco IOS Software for Catalyst 6000 Series Switches DoS (cisco-sa-ios-dos-Hq4d3tZG)

According to its self-reported version, Cisco IOS is affected by a vulnerability. - A vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches could allow an unauthenticated, adjacent attacker to cause an affected device to reload unexpectedly. This vulnerability is due to...

7.4CVSS5.5AI score0.00291EPSS
Exploits0References4
CVE
CVE
added 2024/03/27 4:51 p.m.75 views

CVE-2024-20276

CVE-2024-20276 describes a DoS vulnerability in Cisco IOS Software for Cisco Catalyst 6000 Series Switches. The issue stems from improper handling of process-switched traffic, which could allow an unauthenticated, adjacent attacker to send crafted traffic and cause the affected device to reload, ...

7.4CVSS6.8AI score0.00291EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/08/11 3:15 p.m.70 views

CVE-2022-20276

CVE-2022-20276 concerns the Android 13 framework where the DevicePolicyManager exposes a side-channel that can reveal whether an app is installed without query permissions. The vulnerability is described as a local information-disclosure issue that does not require user interaction. The affected ...

5.5CVSS5.4AI score0.00095EPSS
Exploits0References1Affected Software1
Ubuntu
Ubuntu
added 2021/03/22 4:55 p.m.121 views

USN-4886-1: Privoxy vulnerabilities

It was discovered that Privoxy incorrectly handled CGI requests. An attacker could possibly use this issue to cause a denial of service or obtain sensitive information. CVE-2020-35502, CVE-2021-20209, CVE-2021-20210, CVE-2021-20213, CVE-2021-20215, CVE-2021-20216, CVE-2021-20217, CVE-2021-20272,...

7.8CVSS7.2AI score0.02355EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/03/22 12:0 a.m.25 views

openSUSE Security Update : privoxy (openSUSE-2021-443)

This update for privoxy fixes the following issues : Update to version 3.0.32 : - Security/Reliability boo1183129 - ssplit: Remove an assertion that could be triggered with a crafted CGI request. Commit 2256d7b4d67. OVE-20210203-0001. CVE-2021-20272 Reported by: Joshua Rogers Opera - cgisendbanne...

7.5CVSS7.1AI score0.02108EPSS
Exploits0References7
Debian
Debian
added 2021/03/09 5:51 p.m.21 views

[SECURITY] [DLA 2587-1] privoxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2587-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA March 09, 2021 https://wiki.debian.org/LTS -...

7.5CVSS7.8AI score0.02108EPSS
Exploits0
Circl
Circl
added 2021/03/09 4:51 p.m.4 views

CVE-2021-20276

creationtimestamp| type| source ---|---|--- 2021-03-09 16:51:45+00:00| seen| https://t.me/cibsecurity/24594...

7.5CVSS7.2AI score0.01953EPSS
Exploits0References1
CVE
CVE
added 2021/03/09 1:12 p.m.194 views

CVE-2021-20276

The CVE-2021-20276 issue affects Privoxy and is due to invalid memory access when an invalid pattern is passed to pcre_compile() (obsolete PCRE code). This can lead to a Denial of Service. The issue is addressed in the Privoxy 3.0.32 update (openSUSE/Gentoo/GNU advisories reference CVE-2021-20276...

7.5CVSS7.1AI score0.01953EPSS
Exploits0References4Affected Software1
AlpineLinux
AlpineLinux
added 2021/03/09 1:12 p.m.25 views

CVE-2021-20276

A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcrecompile may lead to denial of service...

7.5CVSS7.3AI score0.01953EPSS
Exploits0
Circl
Circl
added 2020/12/18 10:44 p.m.4 views

CVE-2020-20276

creationtimestamp| type| source ---|---|--- 2020-12-18 22:44:08+00:00| seen| https://t.me/cibsecurity/21088...

9.8CVSS8.7AI score0.03289EPSS
Exploits0References1
OSV
OSV
added 2020/12/18 7:15 p.m.12 views

CVE-2020-20276

An unauthenticated stack-based buffer overflow vulnerability in common.c's handlePORT in uftpd FTP server versions 2.10 and earlier can be abused to cause a crash and could potentially lead to remote code execution...

9.8CVSS8.2AI score
Exploits0References2
CVE
CVE
added 2020/12/18 6:9 p.m.47 views

CVE-2020-20276

The CVE-2020-20276 entry describes an unauthenticated stack-based buffer overflow in uftpd FTP server versions 2.10 and earlier, specifically in common.c’s handle_PORT function. This vulnerability can cause a crash and potentially enable remote code execution. Connected sources confirm the affect...

9.8CVSS9.8AI score0.03289EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/01/02 8:33 p.m.11 views

CVE-2019-20276

...

Exploits0
CVE
CVE
added 2020/01/02 8:33 p.m.43 views

CVE-2019-20276

CVE-2019-20276 is rejected and not used; this candidate number does not represent an active vulnerability entry.

7.3AI score
Exploits0
Rows per page
Query Builder