Lucene search
K

25 matches found

Circl
Circl
added 2026/02/25 3:39 a.m.2 views

CVE-2026-27607

creationtimestamp| type| source ---|---|--- 2026-02-25 03:39:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfnqzm5lsv2h 2026-02-26 03:10:19+00:00| seen| https://gist.github.com/alon710/a799163ee0d2e212318aa5781377d8b5 2026-03-02 00:00:16+00:00| seen|...

9.1CVSS5.9AI score0.00122EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/02/25 2:10 a.m.4 views

CVE-2026-27607

RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.56 through 1.0.0-alpha.82, RustFS does not validate policy conditions in presigned POST uploads PostObject, allowing attackers to bypass content-length-range, starts-with, and Content-Type constraints. This enabl...

9.1CVSS5.6AI score0.00122EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/07 9:48 a.m.11 views

CVE-2022-27607

Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...

9.8CVSS7AI score0.00457EPSS
Exploits2References1
Tenable Nessus
Tenable Nessus
added 2025/08/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-27607

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing...

8.8CVSS7.2AI score0.21763EPSS
Exploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2025/07/25 11:47 p.m.9 views

Security Bulletin: IBM Cognos Analytics is affected by a security vulnerability in Python JSON Logger (CVE-2025-27607)

Summary There is a vulnerability in Python JSON Logger used by IBM Cognos Analytics CVE-2025-27607. This Security Bulletin relates only to the direct usage of third-party components by IBM Cognos Analytics, and not any nested dependencies within the product. Vulnerability Details...

8.8CVSS6.7AI score0.21763EPSS
Exploits1Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/09 4:33 p.m.9 views

CVE-2025-27607

A flaw was found in the Python JSON Logger library python-json-logger. In affected versions, python-json-logger was vulnerable to remote code execution RCE due to a missing dependency. This issue occurred because msgspec-python313-pre was deleted by the owner, leaving the name open to being claim...

8.8CVSS9AI score0.21763EPSS
Exploits1References6
NVD
NVD
added 2025/03/07 5:15 p.m.12 views

CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS0.21763EPSS
Exploits1References3
UbuntuCve
UbuntuCve
added 2025/03/07 5:15 p.m.5 views

CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS7AI score0.21763EPSS
Exploits1References4
vulnersOsv
vulnersOsv
added 2025/03/07 4:42 p.m.1 views

backend-ai (=1.4.0), backend-ai-accelerator-cuda-open (>=24.9.5 <=26.4.4rc3) +38 more potentially affected by CVE-2025-27607 via python-json-logger (=3.2.1)

python-json-logger PYPI version =3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-json-logger and may be impacted: - backend-ai =1.4.0 - backend-ai-accelerator-cuda-open =24.9.5, =24.9.5, =24.9.5, =24.9.5, =25.13.0, =25.13.0, =25.13.0,...

8.8CVSS7.2AI score0.21763EPSS
Exploits1
Circl
Circl
added 2025/03/07 4:35 p.m.4 views

CVE-2025-27607

creationtimestamp| type| source ---|---|--- 2025-03-07 16:35:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6850 2025-03-07 18:01:34+00:00| seen| Telegram/MKyyCJNfVvpUH0PEmhW7az9OPnbIUC-jF-3Mo1io2kFbkQ 2025-03-07 18:45:18+00:00| seen|...

8.8CVSS7.3AI score0.21763EPSS
Exploits1References11
CVE
CVE
added 2025/03/07 4:18 p.m.205 views

CVE-2025-27607

Technical details are not publicly available in the provided connected documents; monitor for updates.

8.8CVSS7.1AI score0.21763EPSS
Exploits1References3Affected Software1
Debian CVE
Debian CVE
added 2025/03/07 4:18 p.m.7 views

CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS7.8AI score0.21763EPSS
Exploits1
Vulnrichment
Vulnrichment
added 2025/03/07 4:18 p.m.17 views

CVE-2025-27607 Python JSON Logger has a Potential RCE via missing `msgspec-python313-pre` dependency

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

8.8CVSS7.1AI score0.21763EPSS
Exploits1References3
NVD
NVD
added 2024/04/11 1:19 a.m.9 views

CVE-2023-27607

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0...

5.4CVSS5.5AI score0.00097EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/21 5:15 p.m.12 views

CVE-2023-27607 WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0...

5.4CVSS7.2AI score0.00097EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/03/21 5:15 p.m.14 views

CVE-2023-27607 WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability

Missing Authorization vulnerability in WP Swings Points and Rewards for WooCommerce.This issue affects Points and Rewards for WooCommerce: from n/a through 1.5.0...

5.4CVSS5.8AI score0.00097EPSS
Exploits0References1
CVE
CVE
added 2024/03/21 5:15 p.m.25 views

CVE-2023-27607

The CVE-2023-27607 issue affects the WordPress plugin Points and Rewards for WooCommerce (versions up to and including 1.5.0). The root cause is Missing Authorization checks, allowing unauthorized users to change settings. Impact is a Low-severity exposure (CVSS 5.4) involving settings changes. M...

5.4CVSS5.2AI score0.00097EPSS
Exploits0References1
Patchstack
Patchstack
added 2023/05/05 12:0 a.m.7 views

WordPress Points and Rewards for WooCommerce Plugin <= 1.5.0 is vulnerable to Settings Change

Software Points and Rewards for WooCommerce Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.6.0 OWASP Top 10 A2: Broken Authentication Classification Settings Change CVE CVE-2023-27607 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 30461bd57ddb Credits Dave Jong...

5.4CVSS6.7AI score0.00097EPSS
Exploits0References2Affected Software1
Circl
Circl
added 2022/03/22 1:26 a.m.0 views

CVE-2022-27607

creationtimestamp| type| source ---|---|--- 2022-03-22 01:26:36+00:00| seen| https://t.me/cibsecurity/39358...

8.1CVSS8.6AI score0.00457EPSS
Exploits1References1
OSV
OSV
added 2022/03/21 11:15 p.m.10 views

CVE-2022-27607

Bento4 1.6.0-639 has a heap-based buffer over-read in the AP4HvccAtom class, a different issue than CVE-2018-14531...

8.1CVSS7.3AI score
Exploits0References1
Rows per page
Query Builder