Niceforyou

niceforyou

5 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Linear Emerge E3 Access Control Firmware

linear_emerge_e3_access_control_firmware

Linear Emerge E3 Access Control

linear_emerge_e3_access_control

Gefen Gf Avip Mc Firmware

gefen_gf-avip-mc_firmware

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-25504 1Niceforyou 1Gefen Webfwc Jul 5, 2026 May 5, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and...Show more An issue in the /usr/local/bin/jncs.sh script of Gefen WebFWC (In AV over IP products) v1.85h, v1.86v, and v1.70 allows attackers with network access to connect to the device over TCP port 4444 without authentication and execute arbitrary commands with root privileges.Show less
CVE-2022-42710 1Niceforyou 1Linear Emerge E3 Access Control Firmware Jun 17, 2026 Jan 3, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Nice (formerly Nortek) Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e devices are vulnerable to Stored Cross-Site Scripting (XSS).
CVE-2022-38627 1Niceforyou 1Linear Emerge E3 Access Control Firmware Jun 17, 2026 Jan 3, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter.
CVE-2022-46381 1Niceforyou 1Linear Emerge E3 Access Control Firmware Jun 17, 2026 Dec 13, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0....Show more Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.Show less
CVE-2022-38628 1Niceforyou 1Linear Emerge E3 Access Control Firmware Jun 17, 2026 Dec 13, 2022 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS) vulnerability which is chained with a local session fixation...Show more Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS) vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified vectors.Show less