773 matches found
CVE-2019-7270
Linear eMerge 50P/5000P devices are affected by a CSRF vulnerability (CVE-2019-7270) in the web application. The issue arises from insufficient validation of requests from trusted users, enabling an attacker to induce unwanted actions if a user is authenticated. ICSA notes remote exploitation pot...
PT-2019-18500 · Linear · Linear Emerge 50P/5000P
Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows for Cross-Site Request Forgery CSRF, which is a type of attack that tricks a user into performing unintended actions on a web application...
PT-2019-18485 · Linear · Linear Emerge E3-Series
Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for cross-site scripting XSS attacks. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
Nortek Security & Control Linear eMerge 50P/5000P Trust Management Issue Vulnerability
Nortek Security & Control Linear eMerge 50P/5000P is a browser-based access control system from Nortek Security & Control, USA. A vulnerability in Nortek Security & Control Linear eMerge 50P/5000P exists due to a trust management issue. The vulnerability stems from the lack of an effective trust...
CVE-2019-7266: Reliance on Cookies without Validation and Integrity Checking
Linear eMerge 50P/5000P devices allow Authentication Bypass...
PT-2019-18496 · Linear · Linear Emerge 50P/5000P
Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows for authentication bypass. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...
PT-2019-18495 · Linear · Linear Emerge E3-Series
Name of the Vulnerable Software and Affected Versions: Linear eMerge E3-Series devices affected versions not specified Description: The issue allows for Remote Code Execution, providing root access over SSH. Recommendations: At the moment, there is no information about a newer version that contai...
CVE-2019-7270: Cross-Site Request Forgery (CSRF)
Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7268: Unrestricted Upload of File with Dangerous Type
Linear eMerge 50P/5000P devices allow Unauthenticated File Upload...
CVE-2019-7267: Improper Limitation of a Pathname to a Restricted Directory
Linear eMerge 50P/5000P devices allow Cookie Path Traversal...
PT-2019-18498 · Linear · Linear Emerge 50P/5000P
Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows for unauthenticated file upload. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...
CVE-2019-7259: Exposure of Sensitive Information to an Unauthorized Actor
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure...
CVE-2019-7258: Incorrect Authorization
Linear eMerge E3-Series devices allow Privilege Escalation...
CVE-2019-7262: Cross-Site Request Forgery (CSRF)
Linear eMerge E3-Series devices allow Cross-Site Request Forgery CSRF...
CVE-2019-7263: Undefined Security Weakness
Linear eMerge E3-Series devices have a Version Control Failure...
PT-2019-18486
Name of the Vulnerable Software and Affected Versions Linear eMerge E3-Series versions le1.00-06 Description The issue allows Command Injections. Linear eMerge E3-Series devices are affected. The vulnerability was exploited in the wild, posing significant security risks. Recommendations For Linea...
CVE-2019-7269: Improper Neutralization of Special Elements used in an OS Command
Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution...
PT-2019-18497 · Linear · Linear Emerge 50P/5000P
Name of the Vulnerable Software and Affected Versions: Linear eMerge 50P/5000P devices affected versions not specified Description: The issue allows Cookie Path Traversal, which may lead to unauthorized access or data manipulation. No information is provided about the estimated number of...
