860 matches found
CVE-2023-3792
A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown part of the file /admin/teststatus.php. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The associated identifier of this...
Design/Logic Flaw
A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown part of the file /admin/teststatus.php. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The associated identifier of this...
CVE-2023-3792
CVE-2023-3792 affects Beijing Netcon NS-ASG 6.3. The vulnerability is in an unknown part of the file /admin/test_status.php, where manipulation leads to a direct request. The exploit has been disclosed publicly, but the provided documents do not specify the exact vector, affected versions beyond ...
CVE-2023-3792 Beijing Netcon NS-ASG test_status.php direct request
A vulnerability was found in Beijing Netcon NS-ASG 6.3. It has been classified as problematic. This affects an unknown part of the file /admin/teststatus.php. The manipulation leads to direct request. The exploit has been disclosed to the public and may be used. The associated identifier of this...
GHSA-GQXR-HVRW-6HFH Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
Jenkins NS-ND Integration Performance Publisher Plugin stores credentials in job config.xml files on the Jenkins controller as part of its configuration. While these credentials are stored encrypted on disk, in NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier, the job...
Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
Jenkins NS-ND Integration Performance Publisher Plugin stores credentials in job config.xml files on the Jenkins controller as part of its configuration. While these credentials are stored encrypted on disk, in NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier, the job...
CVE-2023-33000
Jenkins NS-ND Integration Performance Publisher Plugin 4.8.0.149 and earlier does not mask credentials displayed on the configuration form, increasing the potential for attackers to observe and capture them...
CVE-2023-33000
CVE-2023-33000 affects Jenkins NS-ND Integration Performance Publisher Plugin. Versions up to 4.8.0.149 do not mask credentials in the configuration form, enabling observers to see them. The issue, with a high confidentiality impact (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N), is mitigated in...
Jenkins NS-ND Integration Performance Publisher Plugin 安全漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
Sql injection
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
CVE-2023-30242
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...
Sql injection
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
CVE-2023-30242
NS-ASG v6.3 was discovered to contain a SQL injection vulnerability via the component /admin/addikev2.php...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is vulnerable to SQL Injection via TunnelId that allows access to sensitive information...
CVE-2023-30243
Beijing Netcon NS-ASG Application Security Gateway v6.3 is affected by a SQL Injection via TunnelId, enabling access to sensitive information. This CVE (CVE-2023-30243) has a CVSSv3.1 base score of 7.5 (HIGH), with network attack vector, no user interaction, and no privileges required. The vulner...
Netcon NS-ASG SQL注入漏洞
Netcon NS-ASG is an application security gateway from China Netcon Technology Netcon. A security vulnerability exists in Netcon NS-ASG v6.3, which originates from allowing access to sensitive information via TunnelId, leading to SQL injection attacks...
CVE-2023-30242
NS-ASG v6.3 contains a SQL injection vulnerability in /admin/add_ikev2.php. CVSS 3.1 base score 9.8 (CRITICAL): network vector, no auth, no UI interaction, impacts to confidentiality, integrity, and availability. Root cause details and official remediation/version patch are not specified in the p...