Approved changes feed: RSS · Atom

cpe:2.3:a:netentsec:ns-asg_application_security_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNetentsec (35c6ee8a-173f-5f88-8526-1e532b39cb67)
ProductNs Asg Application Security Gateway (ea252aba-cd08-5622-9b7b-4124c1a30522)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6007 vulnerable 2026-06-08 06:58:17.179574 Netentsec NS-ASG Application Security Gateway deleteiscgwrouteconf.php sql injection
MEDIUM (6.3)
A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /protocol/iscgwtunnel/deleteiscgwrouteconf.php. The manipulation of the argument messagecontent leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268695. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-15T13:00:06.148Z
Updated: 2024-08-01T21:25:03.178Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5773 vulnerable 2026-06-08 06:56:17.418622 Netentsec NS-ASG Application Security Gateway deletemacbind.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/firewall/deletemacbind.php. The manipulation of the argument messagecontent leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-267456. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-09T03:00:04.420Z
Updated: 2024-08-01T21:18:06.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5772 vulnerable 2026-06-08 06:56:17.417875 Netentsec NS-ASG Application Security Gateway deleteiscuser.php sql injection
MEDIUM (6.3)
A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /protocol/iscuser/deleteiscuser.php. The manipulation of the argument messagecontent leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-267455. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-09T02:00:04.646Z
Updated: 2024-08-01T21:18:07.043Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5590 vulnerable 2026-06-08 06:56:16.628824 Netentsec NS-ASG Application Security Gateway JSON Content uploadiscuser.php sql injection
MEDIUM (6.3)
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. This vulnerability affects unknown code of the file /protocol/iscuser/uploadiscuser.php of the component JSON Content Handler. The manipulation of the argument messagecontent leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-266848. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-03T00:31:03.973Z
Updated: 2024-08-20T17:57:08.734Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5589 vulnerable 2026-06-08 06:56:16.628246 Netentsec NS-ASG Application Security Gateway sql injection
MEDIUM (6.3)
A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /admin/config_MT.php?action=delete. The manipulation of the argument Mid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266847. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-06-03T00:00:04.785Z
Updated: 2024-08-01T21:18:06.556Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3458 vulnerable 2026-06-08 06:41:53.334077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3457 vulnerable 2026-06-08 06:41:53.333614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3456 vulnerable 2026-06-08 06:41:53.333106 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3455 vulnerable 2026-06-08 06:41:53.331379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3041 vulnerable 2026-06-08 06:41:52.263493 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-3040 vulnerable 2026-06-08 06:41:52.263006 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2649 vulnerable 2026-06-08 06:33:31.719700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2648 vulnerable 2026-06-08 06:33:31.719138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2647 vulnerable 2026-06-08 06:33:31.718752 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2646 vulnerable 2026-06-08 06:33:31.718207 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2645 vulnerable 2026-06-08 06:33:31.717484 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2644 vulnerable 2026-06-08 06:33:31.717066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2330 vulnerable 2026-06-08 06:33:30.879213 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2329 vulnerable 2026-06-08 06:33:30.878749 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2022 vulnerable 2026-06-08 06:33:30.157791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-2021 vulnerable 2026-06-08 06:33:30.155205 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7161 vulnerable 2026-06-08 06:21:57.159012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7094 vulnerable 2026-06-08 06:21:57.016471 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6903 vulnerable 2026-06-08 06:21:56.237030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5826 vulnerable 2026-06-08 06:19:44.845677 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5785 vulnerable 2026-06-08 06:19:44.717849 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5784 vulnerable 2026-06-08 06:19:44.717285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5700 vulnerable 2026-06-08 06:19:44.509057 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-5681 vulnerable 2026-06-08 06:19:44.481366 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.