CVE-2021-27454

The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 all firmware versions prior to 02A04.1...

MAL-2025-27454 Malicious code in nft-generatornft-collection586 (npm)

The package nft-generatornft-collection586 was found to contain malicious code...

CVE-2025-27454

The application is vulnerable to cross-site request forgery. An attacker can trick a valid, logged in user into submitting a web request that they did not intend. The request uses the victim's browser's saved authorization to execute the request...

CVE-2025-27454

creationtimestamp| type| source ---|---|--- 2025-07-03 06:21:25+00:00| seen| https://infosec.exchange/users/certvde/statuses/114787856061012885...

CVE-2024-27454

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...

CVE-2023-27454

Missing Authorization vulnerability in Apollo13Themes Rife Elementor Extensions & Templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rife Elementor Extensions & Templates: from n/a through 1.1.10...

CVE-2023-27454 WordPress Rife Elementor Extensions & Templates plugin <= 1.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in apollo13themes Rife Elementor Extensions & Templates rife-elementor-extensions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rife Elementor Extensions & Templates: from n/a through = 1.1.10...

CVE-2023-27454 WordPress Rife Elementor Extensions & Templates plugin <= 1.1.10 - Broken Access Control vulnerability

Missing Authorization vulnerability in Apollo13Themes Rife Elementor Extensions & Templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rife Elementor Extensions & Templates: from n/a through 1.1.10...

CVE-2023-27454

CVE-2023-27454 describes a Missing/Broken Access Control vulnerability in the WordPress plugin Rife Elementor Extensions & Templates (versions

SUSE CVE-2024-27454

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...

CVE-2024-27454

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...

CVE-2024-27454 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-orjson...

CVE-2024-27454

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...

CVE-2024-27454

The CVE-2024-27454 issue affects the orjson project: orjson before 3.9.15 does not limit recursion for deeply nested JSON documents. Affected component is the orjson loader/parse path (orjson.loads) with potential recursion explosion. The vulnerability is reflected in CVSS 3.1 as HIGH impact to a...

CVE-2024-27454

orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents...

aioipfs (>=0.5.3, <=0.5.5), aioplemmy (>=0.3.2, <=0.3.3) +248 more potentially affected by CVE-2024-27454 via orjson (>=2.0.11, <=3.9.14)

orjson PYPI version =2.0.11, =0.5.3, =0.3.2, =0.13.14, =0.0.1, =2022.7.7, =0.1.1, =0.0.1, =0.0.1, =22.5.13, =4.1.0, =1.0.0, =0.3.2, =0.9.0, =0.1.5, =0.1.24 and more Source cves: CVE-2024-27454 Source advisory: MEND:CVE-2024-27454...

WordPress Rife Elementor Extensions & Templates Plugin <= 1.1.10 is vulnerable to Broken Access Control

Software Rife Elementor Extensions & Templates Type Plugin Vulnerable versions = 1.1.10 Fixed in 1.2.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-27454 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID cb00b4c5fbff Credits István...

CVE-2021-27454

CVE-2021-27454 affects GE Reason DR60 firmware prior to 02A04.1, where the software performs an operation at a privilege level higher than required, enabling execution with unnecessary privileges. This is documented across multiple sources (NVD, Red Hat, CNVD, CVE listings, and CISA ICS advisory)...