CVE-2023-41966

Summary of CVE-2023-41966 (Sielco hardware): Privilege escalation in Sielco Analog FM Transmitters and Radio Link devices via HTTP POST that sets a parameter, enabling a user with read permissions to elevate privileges (Write/Admin). Affected versions span multiple revisions including 2.12 EXC500...

CVE-2023-5784

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent leads to sql injection. The exploit ha...

Sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent leads to sql injection. The exploit ha...

Sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddressinterpret.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been...

CVE-2023-5785 Netentsec NS-ASG Application Security Gateway addaddress_interpret.php sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddressinterpret.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been...

CVE-2023-5785 Netentsec NS-ASG Application Security Gateway addaddress_interpret.php sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddressinterpret.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been...

CVE-2023-5785

CVE-2023-5785 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability originates from /protocol/firewall/addaddress_interpret.php where manipulation of the argument messagecontent enables SQL injection. Public disclosure of exploits is noted. Root cause is input handling in a...

CVE-2023-5784

CVE-2023-5784 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability is in an unknown functionality of the file /protocol/firewall/uploadfirewall.php where manipulating the messagecontent parameter leads to SQL injection. Public exploit information exists and public disclosu...

CVE-2023-5784 Netentsec NS-ASG Application Security Gateway uploadfirewall.php sql injection

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent leads to sql injection. The exploit ha...

PT-2023-32324

Name of the Vulnerable Software and Affected Versions Netentsec NS-ASG Application Security Gateway version 6.3 Description A critical issue was found in the Netentsec NS-ASG Application Security Gateway, affecting an unknown part of the file /protocol/firewall/addaddress interpret.php. The...

CVE-2023-5785: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddressinterpret.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been...

CVE-2023-5784: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent leads to sql injection. The exploit ha...

Sql injection

Unauthenticated SQL injection in the GetAssignmentsDue method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers...

CVE-2023-26579

CVE-2023-26579 affects IDAttend IDWeb application version 3.1.013. The vulnerability is lack of authentication in the DeleteStaff method, enabling unauthenticated attackers to delete staff information. Documented impact is deletion of staff data with network-level access and no privileges require...

CVE-2023-26577

CVE-2023-26577 affects IDAttend’s IDWeb application (versions 3.1.052 and earlier). The issue is a stored cross-site scripting vulnerability that allows an attacker to hijack the browsing session of a logged-in user. Root cause: stored XSS in the IDWeb component. Impact is session hijacking as de...

BIG-IP Session Duration Issue

The vulnerabilities of the BIG-IP Access Policy Manager, as well as of software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibili...

BIG-IP Memory Leak DoS

The vulnerabilities of the BIG-IP Access Policy Manager, as well as of software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibili...

BIG-IP Access Policy Manager Vulnerable Information Exposure

The vulnerabilities of the BIG-IP Access Policy Manager, as well as of software solutions such as BIG-IP Advanced Firewall Manager, BIG-IP Advanced Web Application Firewall, BIG-IP Analytics, BIG-IP Application Acceleration Manager, BIG-IP Application Security Manager, BIG-IP Application Visibili...

CVE-2023-5700

CVE-2023-5700 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability is an SQL injection in an unknown function of /protocol/iscgwtunnel/uploadiscgwrouteconf.php, triggered by manipulating the GWLinkId parameter. Public disclosure is noted, and VDB-243138 is the associated i...

CVE-2023-5700 Netentsec NS-ASG Application Security Gateway uploadiscgwrouteconf.php sql injection

A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel/uploadiscgwrouteconf.php. The manipulation of the argument GWLinkId leads to sql injection. The exploit has been...