25 matches found
CVE-2021-27454
The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 all firmware versions prior to 02A04.1...
MAL-2025-27454 Malicious code in nft-generatornft-collection586 (npm)
The package nft-generatornft-collection586 was found to contain malicious code...
CVE-2025-27454
The application is vulnerable to cross-site request forgery. An attacker can trick a valid, logged in user into submitting a web request that they did not intend. The request uses the victim's browser's saved authorization to execute the request...
CVE-2025-27454
creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:25+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885...
CVE-2024-27454
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
CVE-2023-27454
Missing Authorization vulnerability in Apollo13Themes Rife Elementor Extensions & Templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rife Elementor Extensions & Templates: from n/a through 1.1.10...
CVE-2023-27454
CVE-2023-27454 describes a Missing/Broken Access Control vulnerability in the WordPress plugin Rife Elementor Extensions & Templates (versions
CVE-2023-27454 WordPress Rife Elementor Extensions & Templates plugin <= 1.1.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in Apollo13Themes Rife Elementor Extensions & Templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rife Elementor Extensions & Templates: from n/a through 1.1.10...
CVE-2023-27454 WordPress Rife Elementor Extensions & Templates plugin <= 1.1.10 - Broken Access Control vulnerability
Missing Authorization vulnerability in apollo13themes Rife Elementor Extensions & Templates rife-elementor-extensions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rife Elementor Extensions & Templates: from n/a through = 1.1.10...
SUSE CVE-2024-27454
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
bugbug (0.0.137) potentially affected by CVE-2024-27454 via orjson (2.1.0)
orjson PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on orjson and may be impacted: - bugbug 0.0.137 Source cves: CVE-2024-27454 Source advisory: OSV:GHSA-PWR2-4V36-6QPR...
bugbug (>=0.0.143, <=0.0.147) potentially affected by CVE-2024-27454 via orjson (2.1.2)
orjson PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on orjson and may be impacted: - bugbug =0.0.143, =0.0.147 Source cves: CVE-2024-27454 Source advisory: OSV:GHSA-PWR2-4V36-6QPR...
aioipfs (>=0.5.3, <=0.5.5), aioplemmy (>=0.3.2, <=0.3.3) +239 more potentially affected by CVE-2024-27454 via orjson (>=3.0.0, <=3.9.14)
orjson PYPI version =3.0.0, =0.5.3, =0.3.2, =0.13.14, =0.0.1, =2022.7.7, =0.1.1, =0.0.1, =0.0.1, =22.5.13, =4.1.0, =1.0.0, =0.3.2, =0.9.0, =0.1.0.dev5, =0.1.0.dev8 and more Source cves: CVE-2024-27454 Source advisory: OSV:GHSA-PWR2-4V36-6QPR...
aioipfs (>=0.5.3, <=0.5.5), aioplemmy (>=0.3.2, <=0.3.3) +239 more potentially affected by CVE-2024-27454 via orjson (>=3.0.0, <=3.9.14)
orjson PYPI version =3.0.0, =0.5.3, =0.3.2, =0.13.14, =0.0.1, =2022.7.7, =0.1.1, =0.0.1, =0.0.1, =22.5.13, =4.1.0, =1.0.0, =0.3.2, =0.9.0, =0.1.0.dev5, =0.1.0.dev8 and more Source cves: CVE-2024-27454 Source advisory: GHSA-PWR2-4V36-6QPR...
bugbug (>=0.0.148, <=0.0.185), label-studio (0.4.1) potentially affected by CVE-2024-27454 via orjson (2.1.3)
orjson PYPI version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on orjson and may be impacted: - bugbug =0.0.148, =0.0.185 - label-studio 0.4.1 Source cves: CVE-2024-27454 Source advisory: OSV:PYSEC-2024-40...
bugbug (>=0.0.128, <=0.0.136) potentially affected by CVE-2024-27454 via orjson (2.0.11)
orjson PYPI version 2.0.11 is affected by a known vulnerability. The following packages have a transitive dependency on orjson and may be impacted: - bugbug =0.0.128, =0.0.136 Source cves: CVE-2024-27454 Source advisory: OSV:PYSEC-2024-40...
CVE-2024-27454
orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...
apologies (>=0.1.5, <=0.1.24), buvar (>=0.6.0, <=0.11.0) +5 more potentially affected by CVE-2024-27454 via orjson (2.6.8)
orjson PYPI version 2.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on orjson and may be impacted: - apologies =0.1.5, =0.6.0, =0.1.0, =0.8.0, =0.1.0, =0.2.6, =0.0.10, =0.0.12 Source cves: CVE-2024-27454 Source advisory: OSV:PYSEC-2024-40...
