Approved changes feed: RSS · Atom

cpe:2.3:o:niceforyou:linear_emerge_e3_access_control_firmware:0.32-09a:*:*:*:*:*:*:*

part: o version: 0.32-09a update: *

VendorNiceforyou (db64ee13-1585-5557-b938-e728d47a0c65)
ProductLinear Emerge E3 Access Control Firmware (bf55c966-0650-58b5-8091-276bf01e6dc4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-46381 vulnerable 2026-06-08 05:50:38.756138 Details available
Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T14:39:14.665Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-42710 vulnerable 2026-06-08 05:49:30.181971 Details available
Nice (formerly Nortek) Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e devices are vulnerable to Stored Cross-Site Scripting (XSS).
Published: 2023-01-03T00:00:00.000Z
Updated: 2025-04-10T14:39:51.769Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38628 vulnerable 2026-06-08 05:47:16.723539 Details available
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a cross-site scripting (XSS) vulnerability which is chained with a local session fixation. This vulnerability allows attackers to escalate privileges via unspecified vectors.
Published: 2022-12-13T00:00:00.000Z
Updated: 2025-04-22T15:38:50.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-38627 vulnerable 2026-06-08 05:47:16.721114 Details available
Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter.
Published: 2023-01-03T00:00:00.000Z
Updated: 2025-04-10T15:55:19.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.