Lucene search
+L

789 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/08 12:00 a.m.•2 views

CVE-2024-3457: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/configISCGroupNoCache.php. The manipulation of the argument GroupId leads to sql injection. It is possible to initiate the attack remotely. T...

9.8CVSS5.5AI score0.0068EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/08 12:00 a.m.•19 views

Netentsec NS-ASG Application Security Gateway SQL注入漏洞

NetentSec NS-ASG Application Security Gateway is an application security gateway from China NetentSec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from an SQL injection vulnerability in the parameter SingleLoginId in the file...

9.8CVSS7AI score0.0073EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/08 12:00 a.m.•30 views

PT-2024-25993 · Netentsec · Netentsec Ns-Asg Application Security Gateway

Name of the Vulnerable Software and Affected Versions: Netentsec NS-ASG Application Security Gateway version 6.3 Description: A critical vulnerability was found in the Netentsec NS-ASG Application Security Gateway. This issue affects the file /admin/add ikev2.php and is caused by the manipulation...

9.8CVSS7.2AI score0.00707EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/08 12:00 a.m.•3 views

CVE-2024-3458: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/addikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.5AI score0.00707EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/08 12:00 a.m.•4 views

CVE-2024-3456: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/configAnticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack may be launched...

9.8CVSS7AI score0.00759EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/08 12:00 a.m.•6 views

CVE-2024-3455: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/addpostlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can b...

9.8CVSS5.5AI score0.0073EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/08 12:00 a.m.•18 views

Netentsec NS-ASG Application Security Gateway SQL注入漏洞

NetentSec NS-ASG Application Security Gateway is an application security gateway from China NetentSec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from a SQL injection vulnerability in the parameter GroupId in the file...

9.8CVSS7AI score0.0068EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/04/08 12:00 a.m.•20 views

Netentsec NS-ASG Application Security Gateway SQL注入漏洞

NetentSec NS-ASG Application Security Gateway is an application security gateway from China NetentSec. A SQL injection vulnerability exists in Netentsec NS-ASG Application Security Gateway version 6.3, which originates from a SQL injection vulnerability in the parameter GroupId in the file...

9.8CVSS7AI score0.00759EPSS
SaveExploits2References5
NVD
NVD
•added 2024/04/04 6:15 a.m.•25 views

CVE-2024-28520

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component...

6.5CVSS6AI score0.00172EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/04 12:00 a.m.•36 views

CVE-2024-28520

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component...

6.3AI score0.00172EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/04 12:00 a.m.•2 views

CVE-2024-28520: Unrestricted Upload of File with Dangerous Type

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component...

6.5CVSS5.9AI score0.00172EPSS
SaveExploits0References3
CVE
CVE
•added 2024/04/04 12:00 a.m.•84 views

CVE-2024-28520

The Byzoro Networks Smart multi-service security gateway intelligent management platform version S210 is susceptible to a File Upload vulnerability within the uploadfile.php component. This flaw allows an attacker to obtain sensitive information . To mitigate this risk, it is recommended to restr...

6.5CVSS6.3AI score0.00172EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/04 12:00 a.m.•16 views

CVE-2024-28520

File Upload vulnerability in Byzoro Networks Smart multi-service security gateway intelligent management platform version S210, allows an attacker to obtain sensitive information via the uploadfile.php component...

6.1AI score0.00172EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/04/04 12:00 a.m.•17 views

PT-2024-22451 · Byzoro Networks · Byzoro Networks Smart Multi-Service Security Gateway Intelligent Management Platform

Name of the Vulnerable Software and Affected Versions: Byzoro Networks Smart multi-service security gateway intelligent management platform version S210 Description: The issue allows an attacker to obtain sensitive information via the uploadfile.php component. This is a result of a File Upload...

6.5CVSS6.8AI score0.00172EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/04/03 12:00 a.m.•20 views

Command Execution Vulnerability in EG3210 of Beijing StarNet Ruijie Network Technology Co. Ltd (CNVD-2024-23199)

The EG3210 is a multi-service security gateway. A command execution vulnerability exists in the EG3210, which can be exploited by an attacker to gain control of a server...

7.6AI score
SaveExploits0
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•22 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /include/authrp.php file...

5.1CVSS7.9AI score0.00291EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•16 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /3g/index.php file...

8.8CVSS7.9AI score0.00657EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/01 12:00 a.m.•16 views

NetentSec NS-ASG 安全漏洞

NetentSec NS-ASG is an application security gateway from China NetentSec. A security vulnerability exists in NetentSec NS-ASG version 6.3, which originates from an SQL injection vulnerability in the /admin/configISCGroupTimePolicy.php file...

6.3CVSS7.9AI score0.00347EPSS
SaveExploits1References2
NVD
NVD
•added 2024/03/28 3:15 p.m.•27 views

CVE-2024-3041

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS6.8AI score0.00824EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/03/28 3:00 p.m.•16 views

CVE-2024-3041 Netentsec NS-ASG Application Security Gateway listloginfo.php sql injection

A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been...

6.5CVSS7.3AI score0.00824EPSS
SaveExploits1References4
Rows per page
Query Builder