EUVD-2026-70202

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...

CVE-2017-20277

creationtimestamp| type| source ---|---|--- 2026-06-19 18:20:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3monxfyu6sh2m...

Azure Linux 3.0 Security Update: samba (CVE-2021-20277)

The version of samba installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-20277 advisory. - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an...

MiracleLinux 8 : libldb-2.1.3-3.el8 (AXSA:2021-1663:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1663:02 advisory. samba: Out of bounds read in AD DC LDAP server CVE-2021-20277 Tenable has extracted the preceding description block directly from the MiracleLinux security...

MiracleLinux 7 : libldb-1.5.4-2.el7 (AXSA:2021-1633:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1633:01 advisory. samba: Out of bounds read in AD DC LDAP server CVE-2021-20277 Tenable has extracted the preceding description block directly from the MiracleLinux security...

CVE-2025-20277

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper...

CVE-2025-20277 Cisco Unified Contact Center Express Path Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Unified CCX could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to improper...

CVE-2022-20277

In DevicePolicyManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Linux Distros Unpatched Vulnerability : CVE-2021-20277

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash of t...

CVE-2021-20277 affecting package samba 4.12.5-7

CVE-2021-20277 affecting package samba 4.12.5-7. No patch is available currently...

CVE-2021-20277 affecting package samba for versions less than 4.18.3-1

CVE-2021-20277 affecting package samba for versions less than 4.18.3-1. An upgraded version of the package is available that resolves this issue...

CVE-2021-20277 affecting package libldb for versions less than 2.7.2-1

CVE-2021-20277 affecting package libldb for versions less than 2.7.2-1. An upgraded version of the package is available that resolves this issue...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libldb Vulnerability (NS-SA-2024-0010)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libldb packages installed that are affected by a vulnerability: - A flaw was found in Samba's libldb. Multiple, consecutive leading spaces in an LDAP attribute can lead to an out-of-bounds memory write, leading to a crash o...

CVE-2024-20277

creationtimestamp| type| source ---|---|--- 2024-01-17 18:27:31+00:00| seen| https://t.me/ctinow/169409 2024-01-28 16:26:54+00:00| seen| https://t.me/ctinow/174977...

CVE-2024-20277

A vulnerability in the web-based management interface of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient validation of...

CVE-2024-20277

The CVE pertains to Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, with a web-based management interface vulnerability that allows authenticated, remote command execution and root privilege escalation due to insufficient input validation. Exploitation involves sending a...

Ubuntu: Security Advisory (USN-4888-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-20277

CVE-2022-20277 affects the Android framework component DevicePolicyManager. The issue is a side-channel information disclosure that enables an app to determine whether another app is installed without needing query permissions, leading to local information disclosure without extra execution privi...

uftpd 2.10 - Directory Traversal (Authenticated)

Exploit Title: uftpd 2.10 - Directory Traversal Authenticated Google Dork: N/A Exploit Author: Aaron Esau arinerron Vendor Homepage: https://github.com/troglobit/uftpd Software Link: https://github.com/troglobit/uftpd Version: 2.7 to 2.10 Tested on: Linux CVE : CVE-2020-20277 Reference:...

uftpd 2.10 Directory Traversal

Exploit Title: uftpd 2.10 - Directory Traversal Authenticated Google Dork: N/A Exploit Author: Aaron Esau arinerron Vendor Homepage: https://github.com/troglobit/uftpd Software Link: https://github.com/troglobit/uftpd Version: 2.7 to 2.10 Tested on: Linux CVE : CVE-2020-20277 Reference:...