applied-risk.com vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

Linear eMerge E3-Series devices allow File Inclusion.

Nortekcontrol Linear Emerge Essential Firmware Nortekcontrol Linear Emerge Elite Firmware

8.8

CVSSv3

Linear eMerge E3-Series devices allow Privilege Escalation.

Nortekcontrol Linear Emerge Essential Firmware Nortekcontrol Linear Emerge Elite Firmware

8.8

CVSSv3

Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.

Nortekcontrol Linear Emerge Essential Firmware Nortekcontrol Linear Emerge Elite Firmware

9.8

CVSSv3

Linear eMerge E3-Series devices have Hard-coded Credentials.

Nortekcontrol Linear Emerge Essential Firmware Nortekcontrol Linear Emerge Elite Firmware

8.8

CVSSv3

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

Nortekcontrol Linear Emerge Essential Firmware Nortekcontrol Linear Emerge Elite Firmware

6.1

CVSSv3

Optergy Proton/Enterprise devices allow Open Redirect.

Optergy Proton Optergy Enterprise

9.8

CVSSv3

Prima Systems FlexAir, Versions 2.3.38 and prior. The application generates database backup files with a predictable name, and an attacker can use brute force to identify the database backup file name. A malicious actor can exploit this issue to download the database file and dis...

Primasystems Flexair

7.2

CVSSv3

Prima Systems FlexAir, Versions 2.3.38 and prior. The application incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component, which could allow malicious users to execute commands directly on the operating system.

Primasystems Flexair

6.1

CVSSv3

Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via the username GET parameter.

Computrols Computrols Building Automation System

8.8

CVSSv3

Computrols CBAS 18.0.0 allows Authenticated Blind SQL Injection via the id GET parameter, as demonstrated by the index.php?m=servers&a=start_pulling&id= substring.

Computrols Computrols Building Automation Software

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook