Linear eMerge 50P/5000P devices allow Cross-Site Request Forgery (CSRF).

Linear eMerge 50P/5000P devices allow Authenticated Command Injection with root Code Execution.

Linear eMerge 50P/5000P devices allow Unauthenticated File Upload.

Linear eMerge 50P/5000P devices allow Cookie Path Traversal.

Linear eMerge 50P/5000P devices allow Authentication Bypass.

Linear eMerge E3-Series devices allow Remote Code Execution (root access over SSH).

Linear eMerge E3-Series devices allow a Stack-based Buffer Overflow on the ARM platform.

Linear eMerge E3-Series devices have a Version Control Failure.

Linear eMerge E3-Series devices allow Cross-Site Request Forgery (CSRF).

Linear eMerge E3-Series devices have Hard-coded Credentials.

Linear eMerge E3-Series devices have Cleartext Credentials in a Database.

Linear eMerge E3-Series devices allow Authorization Bypass with Information Disclosure.

Linear eMerge E3-Series devices allow Privilege Escalation.

Linear eMerge E3-Series devices allow Unrestricted File Upload.

Linear eMerge E3-Series devices allow XSS.

Linear eMerge E3-Series devices allow File Inclusion.

Linear eMerge E3-Series devices allow Directory Traversal.

Linear eMerge E3-Series devices have Default Credentials.

An Integer Signedness issue (for a return code) in the res_pjsip_sdp_rtp module in Digium Asterisk versions 15.7.1 and earlier and 16.1.1 and earlier allows remote authenticated users to crash Asterisk via a specially crafted SDP protocol violation.

An issue was discovered in the Cross Reference Add-on 36 for Google Docs. Stored XSS in the preview boxes in the configuration panel may allow a malicious user to use both label text and references text to inject arbitrary JavaScript code (via SCRIPT elements, event handlers, etc.). Since this code is stored by the plugin, the attacker may be able to target anyone who opens the configuration panel of the plugin.