Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
13 results
Jul 2, 2019Linear eMerge E3-Series devices allow Privilege Escalation.CVE-2019-7258 · Other software · Nortekcontrol · reported by MITREHigh 8.8
Linear eMerge E3-Series devices allow Privilege Escalation.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices allow Unrestricted File Upload.CVE-2019-7257 · Other software · Nortekcontrol · reported by MITRECritical 10
Linear eMerge E3-Series devices allow Unrestricted File Upload.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices allow XSS.CVE-2019-7255 · Other software · Nortekcontrol · reported by MITREMedium 6.1
Linear eMerge E3-Series devices allow XSS.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices allow File Inclusion.CVE-2019-7254 · Other software · Nortekcontrol · reported by MITREHigh 7.5
Linear eMerge E3-Series devices allow File Inclusion.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices allow Directory Traversal.CVE-2019-7253 · Other software · Nortekcontrol · reported by MITRECritical 9.8
Linear eMerge E3-Series devices allow Directory Traversal.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordapplied-risk.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices have Default Credentials.CVE-2019-7252 · Other software · Nortekcontrol · reported by MITRECritical 9.8
Linear eMerge E3-Series devices have Default Credentials.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordapplied-risk.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).CVE-2019-7262 · Other software · Nortekcontrol · reported by MITREHigh 8.8
Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices have Hard-coded Credentials.CVE-2019-7261 · Other software · Nortekcontrol · reported by MITRECritical 9.8
Linear eMerge E3-Series devices have Hard-coded Credentials.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices have Cleartext Credentials in a Database.CVE-2019-7260 · Other software · Nortekcontrol · reported by MITRECritical 9.8
Linear eMerge E3-Series devices have Cleartext Credentials in a Database.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordapplied-risk.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.CVE-2019-7259 · Other software · Nortekcontrol · reported by MITREHigh 8.8
Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).CVE-2019-7265 · Other software · Nortekcontrol · reported by MITRECritical 9.8
Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.CVE-2019-7264 · Other software · Nortekcontrol · reported by MITRECritical 9.8
Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordapplied-risk.comapplied-risk.com
Jul 2, 2019Linear eMerge E3-Series devices have a Version Control Failure.CVE-2019-7263 · Other software · Nortekcontrol · reported by MITRECritical 9.8
Linear eMerge E3-Series devices have a Version Control Failure.
- Product
- Linear Emerge Essential Firmware
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordapplied-risk.comapplied-risk.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.