asterisk -- Remote Crash Vulnerability in audio transcoding

The Asterisk project reports: When audio frames are given to the audio transcoding support in Asterisk the number of samples are examined and as part of this a message is output to indicate that no samples are present. A change was done to suppress this message for a particular scenario in which...

Linear eMerge E3-Series Command Injection Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A command injection vulnerability exists in the Linear eMerge E3-Series device that stems from a program that uses external input to construct commands, but fails to properly hand...

Linear eMerge E3-Series Cross-Site Scripting Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A cross-site scripting vulnerability exists in the Linear eMerge E3-Series. The vulnerability stems from a lack of proper validation of client data by the web application. An...

Nortek Security & Control Linear eMerge E3-Series Privilege Permission and Access Control Issues Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series due to a permission and access control issue. The vulnerability can be exploited by an attacker to...

Nortek Security & Control Linear eMerge E3-Series Trust Management Issue Vulnerability (CNVD-2019-34629)

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series due to a trust management issue. An attacker could exploit the vulnerability to execute code...

Linear eMerge 50P/5000P Catalog Traversal Vulnerability

The Linear eMerge 50P/5000P is an access control security system managed through a browser from Nortek Security & Control. A directory traversal vulnerability exists in the Linear eMerge 50P/5000P. An attacker could use this vulnerability to traverse the file system to access files or directories...

Linear eMerge 50P/5000P File Upload Vulnerability

The Linear eMerge 50P/5000P is an access control security system managed through a browser from Nortek Security & Control. A file upload vulnerability exists in the Linear eMerge 50P/5000P. An attacker could use this vulnerability to upload a file with an arbitrary extension to a directory in the...

Nortek Security & Control Linear eMerge E3-Series Buffer Overflow Vulnerability

The Nortek Security & Control Linear eMerge E3-Series is an access control system from Nortek Security & Control, USA. A buffer overflow vulnerability exists in the Linear eMerge E3-Series device and can be exploited by an attacker to execute arbitrary code...

Nortek Security & Control Linear eMerge 50P/5000P Command Injection Vulnerability

Nortek Security & Control Linear eMerge 50P/5000P is a browser-based access control system from Nortek Security & Control, USA. A command injection vulnerability exists in the Nortek Security & Control Linear eMerge 50P/5000P, which can be exploited by an attacker to execute illegal operating...

Nortek Security & Control Linear eMerge 50P/5000P Cross-Site Request Forgery Vulnerability

Nortek Security & Control Linear eMerge 50P/5000P is a browser-based access control system from Nortek Security & Control, USA. A cross-site request forgery vulnerability exists in the Nortek Security & Control Linear eMerge 50P/5000P, which arises from a WEB application that does not adequately...

Linear eMerge 50P/5000P Authentication Bypass Vulnerability

The Linear eMerge 50P/5000P is an access control security system managed through a browser from Nortek Security & Control. An authentication bypass vulnerability exists in the Linear eMerge 50P/5000P. An attacker can exploit this vulnerability by sending a specially crafted HTTP request to bypass...

Nortek Security & Control Linear eMerge E3-Series Trust Management Issue Vulnerability (CNVD-2019-34630)

The Nortek Security & Control Linear eMerge E3-Series is an access control device from Nortek Security & Control USA. A vulnerability exists in the Nortek Security & Control Linear eMerge E3-Series due to a trust management issue. An attacker could exploit the vulnerability to bypass authenticati...

CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections...

CVE-2019-7257

Linear eMerge E3-Series devices allow Unrestricted File Upload...

CVE-2019-7255

Linear eMerge E3-Series devices allow XSS...

CVE-2019-7258

Linear eMerge E3-Series devices allow Privilege Escalation...

CVE-2019-7254

Linear eMerge E3-Series devices allow File Inclusion...

CVE-2019-7255

Linear eMerge E3-Series devices allow XSS...

CVE-2019-7256

Linear eMerge E3-Series devices allow Command Injections...

CVE-2019-7258

Linear eMerge E3-Series devices allow Privilege Escalation...