1026 matches found
CVE-2019-7255
CVE-2019-7255 affects Linear eMerge E3-Series devices. The Nuclei template documents a Cross-Site Scripting (XSS) vulnerability exploitable via the layout parameter in the web interface (e.g., badge_template_v0.php?layout=...). Impact: attacker can execute arbitrary script in a user’s browser, wi...
CVE-2019-7257
The connected ICS advisory confirms CVE-2019-7257 affects Nice Linear eMerge E3-Series devices (firmware 1.00-06 and earlier). The vulnerability is Unrestricted Upload of a File with Dangerous Type, enabling remote code execution by uploading a malicious file to the device’s web root. MITRE CVSS ...
CVE-2019-7257
Linear eMerge E3-Series devices allow Unrestricted File Upload...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
CVE-2019-7262
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7260
Linear eMerge E3-Series devices have Cleartext Credentials in a Database...
CVE-2019-7261
Linear eMerge E3-Series devices have Hard-coded Credentials...
CVE-2019-7260
Linear eMerge E3-Series devices have Cleartext Credentials in a Database...
CVE-2019-7259
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
CVE-2019-7259
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
Design/Logic Flaw
Linear eMerge E3-Series devices have Cleartext Credentials in a Database...
Hardcoded credentials
Linear eMerge E3-Series devices have Hard-coded Credentials...
Authorization
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
Cross site request forgery (csrf)
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7258
Linear eMerge E3-Series devices allow Privilege Escalation...
CVE-2019-7258
CVE-2019-7258 affects Nice Linear eMerge E3-Series firmware 1.00-06 and earlier. Root cause: incorrect authorization (CWE-863) allowing privilege escalation. Impact: attacker could escalate to higher privileges and gain full control of the device; exposure is local to the device’s control interfa...
CVE-2019-7265
Linear eMerge E3-Series devices allow Remote Code Execution root access over SSH...
CVE-2019-7269
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution...