Netcon NS-ASG SQL注入漏洞

Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG v6.3, which originates from an SQL injection vulnerability in the component /admin/addikev2.php...

CVE-2023-30242

NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...

CVE-2023-30242

NS-ASG v6.3 contains a SQL injection vulnerability in /admin/add_ikev2.php. CVSS 3.1 base score 9.8 (CRITICAL): network vector, no auth, no UI interaction, impacts to confidentiality, integrity, and availability. Root cause details and official remediation/version patch are not specified in the p...

CVE-2023-30243

Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...

Netcon NS-ASG SQL注入漏洞

Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG v6.3, which originates from allowing access to sensitive information via TunnelId, leading to SQL injection attacks...

CVE-2023-30243

Beijing Netcon NS-ASG Application Security Gateway v6.3 is affected by a SQL Injection via TunnelId, enabling access to sensitive information. This CVE (CVE-2023-30243) has a CVSSv3.1 base score of 7.5 (HIGH), with network attack vector, no user interaction, and no privileges required. The vulner...

CVE-2023-30243: Improper Neutralization of Special Elements used in an SQL Command

Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...

CVE-2023-30242: Improper Neutralization of Special Elements used in an SQL Command

NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...

CVE-2023-30242

NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...

CVE-2023-30243

Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...

CVE-2022-44236

Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 20181130-16:12 has a Weak password vulnerability...

Cross site scripting

Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 20181130-16:12 is vulnerable to Cross Site Scripting XSS...

PT-2022-27146 · Beijing Zed 3 Technologies Co. · Voip Simpliclty Asg

Name of the Vulnerable Software and Affected Versions: Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG version 8.5.0.17807 Description: The issue is related to a weak password, which can potentially be exploited. There is no information provided about the estimated number of affected devic...

CVE-2022-44235

CVE-2022-44235 affects Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807. The root cause is improper input handling that enables Cross Site Scripting (XSS) in the web portal. Documented impact per CVSS: Network access, user interaction required, confidentiality/integrity low, ava...

CVE-2022-44235

Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 20181130-16:12 is vulnerable to Cross Site Scripting XSS...

CVE-2022-44235: Improper Neutralization of Input During Web Page Generation

Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 20181130-16:12 is vulnerable to Cross Site Scripting XSS...

CVE-2022-44236: Weak Password Requirements

Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 20181130-16:12 has a Weak password vulnerability...

CVE-2022-44236

CVE-2022-44236 affects Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807. A weak password vulnerability is identified in this version; CVSSv3.1 base score 9.8 (NETWORK, HIGH impact to confidentiality, integrity, availability). Public exploit details are not provided in the primar...

Beijing Zed-3 Technologies VoIP simpliclty 安全漏洞

Beijing Zed-3 Technologies VoIP simpliclty is a web portal of Beijing Zed-3 Technologies Beijing, China. A security vulnerability exists in VoIP simplilty ASG version 8.5.0.17807 20181130-16:12, which stems from the presence of a weak password vulnerability...

CVE-2021-46825

Symantec Advanced Secure Gateway ASG and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web...