25 matches found
CVE-2026-27607
creationtimestamp| type| source ---|---|--- 2026-02-25 03:39:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnqzm5lsv2h 2026-02-26 03:10:19+00:00| seen| https://gist.github.com/alon710/a799163ee0d2e212318aa5781377d8b5 2026-03-02 00:00:16+00:00| seen|...
CVE-2026-27607
RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads PostObject, allowing attackers to bypass content-length-range, starts-with, and Content-Type constraints. This enabl...
CVE-2022-27607
Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...
Linux Distros Unpatched Vulnerability : CVE-2025-27607
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing...
Security Bulletin: IBM Cognos Analytics is affected by a security vulnerability in Python JSON Logger (CVE-2025-27607)
Summary There is a vulnerability in Python JSON Logger used by IBM Cognos Analytics CVE-2025-27607. This Security Bulletin relates only to the direct usage of third-party components by IBM Cognos Analytics, and not any nested dependencies within the product. Vulnerability Details...
CVE-2025-27607
A flaw was found in the Python JSON Logger library python-json-logger. In affected versions, python-json-logger was vulnerable to remote code execution RCE due to a missing dependency. This issue occurred because msgspec-python313-pre was deleted by the owner, leaving the name open to being claim...
CVE-2025-27607
Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...
CVE-2025-27607
Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...
backend-ai (=1.4.0), backend-ai-accelerator-cuda-open (>=24.9.5 <=26.4.4rc3) +38 more potentially affected by CVE-2025-27607 via python-json-logger (=3.2.1)
python-json-logger PYPI version =3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-json-logger and may be impacted: - backend-ai =1.4.0 - backend-ai-accelerator-cuda-open =24.9.5, =24.9.5, =24.9.5, =24.9.5, =25.13.0, =25.13.0, =25.13.0,...
CVE-2025-27607
creationtimestamp| type| source ---|---|--- 2025-03-07 16:35:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6850 2025-03-07 18:01:34+00:00| seen| Telegram/MKyyCJNfVvpUH0PEmhW7az9OPnbIUC-jF-3Mo1io2kFbkQ 2025-03-07 18:45:18+00:00| seen|...
CVE-2025-27607
Technical details are not publicly available in the provided connected documents; monitor for updates.
CVE-2025-27607
Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...
CVE-2025-27607 Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency
Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...
CVE-2023-27607
Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0...
CVE-2023-27607 WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability
Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0...
CVE-2023-27607 WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability
Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0...
CVE-2023-27607
The CVE-2023-27607 issue affects the WordPress plugin Points and Rewards for WooCommerce (versions up to and including 1.5.0). The root cause is Missing Authorization checks, allowing unauthorized users to change settings. Impact is a Low-severity exposure (CVSS 5.4) involving settings changes. M...
WordPress Points and Rewards for WooCommerce Plugin <= 1.5.0 is vulnerable to Settings Change
Software Points and Rewards for WooCommerce Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.6.0 OWASP Top 10 A2: Broken Authentication Classification Settings Change CVE CVE-2023-27607 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 30461bd57ddb Credits Dave Jong...
CVE-2022-27607
creationtimestamp| type| source ---|---|--- 2022-03-22 01:26:36+00:00| seen| https://t.me/cibsecurity/39358...
CVE-2022-27607
Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...