Linear

Linear eMerge E3-Series devices allow Command Injections.

Linear eMerge E3-Series devices allow Unrestricted File Upload.

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

The Linear eMerge e3-Series through version 1.00-07 is vulnerable to an OS command injection vulnerability. A remote and unauthenticated attacker can execute arbitrary OS commands via the login_id parameter when invoking the forgot_password functionality over HTTP.

Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

Linear eMerge E3-Series devices allow Directory Traversal.

Linear eMerge E3-Series devices have Default Credentials.

Linear eMerge E3-Series devices have Hard-coded Credentials.

Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

Linear eMerge 50P/5000P devices allow Authentication Bypass.

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

Linear eMerge E3-Series devices allow Privilege Escalation.

Linear eMerge E3-Series devices allow File Inclusion.

Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.

Z-Wave devices based on Silicon Labs 100, 200, and 300 series chipsets do not support encryption, allowing an attacker within radio range to take control of or cause a denial of service to a vulnerable device. An attacker can also capture and replay Z-Wave traffic. Firmware…

Z-Wave devices based on Silicon Labs 500 series chipsets using CRC-16 encapsulation, including but likely not limited to the Linear LB60Z-1 version 3.5, Dome DM501 version 4.26, and Jasco ZW4201 version 4.05, do not implement encryption or replay protection.

The Linear plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'linear_block_buy_commissions' shortcode in all versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…