458 matches found
CVE-2023-30242
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
CVE-2022-44236
Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 20181130-16:12 has a Weak password vulnerability...
Cross site scripting
Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 20181130-16:12 is vulnerable to Cross Site Scripting XSS...
CVE-2022-44235
Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807 20181130-16:12 is vulnerable to Cross Site Scripting XSS...
PT-2022-27146 · Beijing Zed 3 Technologies Co. · Voip Simpliclty Asg
Name of the Vulnerable Software and Affected Versions: Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG version 8.5.0.17807 Description: The issue is related to a weak password, which can potentially be exploited. There is no information provided about the estimated number of affected devic...
CVE-2022-44235
CVE-2022-44235 affects Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807. The root cause is improper input handling that enables Cross Site Scripting (XSS) in the web portal. Documented impact per CVSS: Network access, user interaction required, confidentiality/integrity low, ava...
Beijing Zed-3 Technologies VoIP simpliclty 安全漏洞
Beijing Zed-3 Technologies VoIP simpliclty is a web portal of Beijing Zed-3 Technologies Beijing, China. A security vulnerability exists in VoIP simplilty ASG version 8.5.0.17807 20181130-16:12, which stems from the presence of a weak password vulnerability...
CVE-2022-44236
CVE-2022-44236 affects Beijing Zed-3 Technologies Co.,Ltd VoIP simpliclty ASG 8.5.0.17807. A weak password vulnerability is identified in this version; CVSSv3.1 base score 9.8 (NETWORK, HIGH impact to confidentiality, integrity, availability). Public exploit details are not provided in the primar...
CVE-2021-46825
Symantec Advanced Secure Gateway ASG and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web...
Design/Logic Flaw
Symantec Advanced Secure Gateway ASG and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web...
CVE-2021-46825
Affected products: Symantec Advanced Secure Gateway (ASG) and ProxySG. Vulnerability: HTTP desync/HTTP desmuggling where a remote, unauthenticated attacker can leverage crafted HTTP requests to cause the proxy to forward a web server’s responses to unintended clients when the attacker and other c...
CVE-2021-46825
Symantec Advanced Secure Gateway ASG and ProxySG are susceptible to an HTTP desync vulnerability. When a remote unauthenticated attacker and other web clients communicate through the proxy with the same web server, the attacker can send crafted HTTP requests and cause the proxy to forward web...
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition Cross-Site Scripting Vulnerability
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. A cross-site scripting vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which stems from...
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition Information Disclosure Vulnerability
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An information disclosure vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which stems fr...
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition XML External Entity Injection Vulnerability
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An XML external entity injection vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which...
CVE-2021-45024
ASG technologies A Rocket Software Company ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to XML External Entity XXE...
CVE-2021-45026
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting XSS...