94 matches found
CVE-2017-20277
creationtimestamp| type| source ---|---|--- 2026-06-19 18:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monxfyu6sh2m...
Azure Linux 3.0 Security Update: samba (CVE-2021-20277)
The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-20277 advisory. - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an...
MiracleLinux 8 : libldb-2.1.3-3.el8 (AXSA:2021-1663:02)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1663:02 advisory. samba: Out of bounds read in AD DC LDAP server CVE-2021-20277 Tenable has extracted the preceding description block directly from the MiracleLinux security...
MiracleLinux 7 : libldb-1.5.4-2.el7 (AXSA:2021-1633:01)
The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1633:01 advisory. samba: Out of bounds read in AD DC LDAP server CVE-2021-20277 Tenable has extracted the preceding description block directly from the MiracleLinux security...
CVE-2025-20277
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper...
CVE-2025-20277 Cisco Unified Contact Center Express Path Traversal Vulnerability
A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper...
CVE-2022-20277
In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...
Linux Distros Unpatched Vulnerability : CVE-2021-20277
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of t...
CVE-2021-20277 affecting package samba 4.12.5-7
CVE-2021-20277 affecting package samba 4.12.5-7. No patch is available currently...
CVE-2021-20277 affecting package samba for versions less than 4.18.3-1
CVE-2021-20277 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...
CVE-2021-20277 affecting package libldb for versions less than 2.7.2-1
CVE-2021-20277 affecting package libldb for versions less than 2.7.2-1. An upgraded version of the package is available that resolves this issue...
NewStart CGSL CORE 5.04 / MAIN 5.04 : libldb Vulnerability (NS-SA-2024-0010)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libldb packages installed that are affected by a vulnerability: - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash o...
CVE-2024-20277
creationtimestamp| type| source ---|---|--- 2024-01-17 18:27:31+00:00| seen| https://t.me/ctinow/169409 2024-01-28 16:26:54+00:00| seen| https://t.me/ctinow/174977...
CVE-2024-20277
The CVE pertains to Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, with a web-based management interface vulnerability that allows authenticated, remote command execution and root privilege escalation due to insufficient input validation. Exploitation involves sending a...
CVE-2024-20277
A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of...
Ubuntu: Security Advisory (USN-4888-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-20277
CVE-2022-20277 affects the Android framework component DevicePolicyManager. The issue is a side-channel information disclosure that enables an app to determine whether another app is installed without needing query permissions, leading to local information disclosure without extra execution privi...
uftpd 2.10 - Directory Traversal (Authenticated)
Exploit Title: uftpd 2.10 - Directory Traversal Authenticated Google Dork: N/A Exploit Author: Aaron Esau arinerron Vendor Homepage: https://github.com/troglobit/uftpd Software Link: https://github.com/troglobit/uftpd Version: 2.7 to 2.10 Tested on: Linux CVE : CVE-2020-20277 Reference:...
uftpd 2.10 - Directory Traversal (Authenticated) Vulnerability
Exploit Title: uftpd 2.10 - Directory Traversal Authenticated Exploit Author: Aaron Esau arinerron Vendor Homepage: https://github.com/troglobit/uftpd Software Link: https://github.com/troglobit/uftpd Version: 2.7 to 2.10 Tested on: Linux CVE : CVE-2020-20277 Reference:...
uftpd 2.10 Directory Traversal
Exploit Title: uftpd 2.10 - Directory Traversal Authenticated Google Dork: N/A Exploit Author: Aaron Esau arinerron Vendor Homepage: https://github.com/troglobit/uftpd Software Link: https://github.com/troglobit/uftpd Version: 2.7 to 2.10 Tested on: Linux CVE : CVE-2020-20277 Reference:...