CVE-2022-40363

CVE-2022-40363 A buffer overflow in the component nfcdeviceloadmifareuldata of Flipper Devices Inc., Flipper Zero before v0.65.2 allows attackers to cause a Denial of Service DoS via a crafted NFC file. authentication| complexity| vector ---|---|--- not available| not available| not available...

PT-2026-94954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sa2ul crypto component where the sa ul probe function calls sa init mem to create a DMA Direct Memory Access pool for security context buffers but fails to check t...

an-website (>=22.8.8, <=22.8.10), chk (0.4.0) +3 more potentially affected by CVE-2026-59890 via setuptools (63.4.2)

setuptools PYPI version 63.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.8, =1.0.5, =1.0.8, =1.15.20, =1.15.53 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

SUSE SLED15 / SLES15 Security Update : python-mistune (SUSE-SU-2026:2949-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:2949-1 advisory. This update for python-mistune fixes the following issue - CVE-2026-44898: improper sanitization of user-supplied HTML...

Security update for python-mistune

This update for python-mistune fixes the following issue CVE-2026-44898: improper sanitization of user-supplied HTML input in rendertocul can lead to XSS bsc1265052. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

an-website (>=22.8.8, <=22.8.10), chk (0.4.0) +3 more potentially affected by CVE-2026-59890 via setuptools (63.4.2)

setuptools PYPI version 63.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.8, =1.0.5, =1.0.8, =1.15.20, =1.15.53 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

an-website (>=22.8.8, <=22.8.10), chk (0.4.0) +3 more potentially affected by CVE-2024-6345 via setuptools (63.4.2)

setuptools PYPI version 63.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.8.8, =1.0.5, =1.0.8, =1.15.20, =1.15.53 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the rendertocul function. An attacker can execute arbitrary JavaScript in the context of the rendered page by injecting malicious input into heading text, which is then used unescaped as an anchor ID and labe...

CVE-2026-33283: NULL Pointer Dereference

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...

CVE-2026-33283 Ella Core panics on malformed ULNASTransport Message without a Request Type

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...

CVE-2026-33283

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...

CVE-2026-33283

CVE-2026-33283 – Ella Core panics on malformed UL NAS Transport NAS messages without a Request Type. Ella Core is a 5G core for private networks. The vulnerability affects versions prior to 1.6.0, where processing malformed UL NAS Transport NAS messages without a Request Type causes the applicati...

CVE-2026-33283 Ella Core panics on malformed ULNASTransport Message without a Request Type

Ella Core is a 5G core designed for private networks. Versions prior to 1.6.0 panic when processing malformed UL NAS Transport NAS messages without a Request Type. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all connected...

inmanta-dev-dependencies (2.116.0), ul-py-tool (>=1.16.0, <=1.16.2) potentially affected by CVE-2026-32274 via black (24.4.0)

black PYPI version 24.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on black and may be impacted: - inmanta-dev-dependencies 2.116.0 - ul-py-tool =1.16.0, =1.16.2 Source cves: CVE-2026-32274 Source advisory: OSV:PYSEC-2026-2121...

Honeywell多款产品 访问控制错误漏洞

Honeywell I-HIB2PI-UL 2MP, etc., are products of the American company Honeywell. The Honeywell I-HIB2PI-UL 2MP is an infrared dome camera. The Honeywell SMB NDAA MVO-3 is an infrared gimbal camera. The Honeywell PTZ WDR 2MP 32M is a series of night vision cameras. Several Honeywell products have...

CVE-2025-4676

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K...

CVE-2025-4676

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K...

CVE-2025-4676 Authentication bypass by brute forcing Authentication Headers

Incorrect Implementation of Authentication Algorithm vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K...

CVE-2025-4676

CVE-2025-4676 affects ABB WebPro SNMP Card PowerValue and WebPro SNMP Card PowerValue UL up to version 1.1.8.K. Root cause is an incorrect implementation of the authentication algorithm. CVSS metrics indicate HIGH impact with adjacent attack vector, low complexity, no privileges required, user in...

CVE-2025-4675 Improper implementation of Modbus protocol leading to DOS attack

Improper Check for Unusual or Exceptional Conditions vulnerability in ABB WebPro SNMP Card PowerValue, ABB WebPro SNMP Card PowerValue UL.This issue affects WebPro SNMP Card PowerValue: through 1.1.8.K; WebPro SNMP Card PowerValue UL: through 1.1.8.K...