https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-6007.htmlhttps://patchthecve.com/cve/CVE-2024-6007.htmlWed, 17 Jun 2026 08:17:05 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /protocol/iscgwtunnel/deleteiscgwrouteconf.php. The manipulation of the argument messagecontent leads to sql injection. It is possible to initiate the https://patchthecve.com/cve/CVE-2024-5773.htmlhttps://patchthecve.com/cve/CVE-2024-5773.htmlWed, 17 Jun 2026 08:16:38 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/firewall/deletemacbind.php. The manipulation of the argument messagecontent leads to sql injection. It is possible to launch the athttps://patchthecve.com/cve/CVE-2024-5772.htmlhttps://patchthecve.com/cve/CVE-2024-5772.htmlWed, 17 Jun 2026 08:16:38 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /protocol/iscuser/deleteiscuser.php. The manipulation of the argument messagecontent leads to sql injection. The attack may bhttps://patchthecve.com/cve/CVE-2024-5590.htmlhttps://patchthecve.com/cve/CVE-2024-5590.htmlWed, 17 Jun 2026 08:16:15 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. This vulnerability affects unknown code of the file /protocol/iscuser/uploadiscuser.php of the component JSON Content Handler. The manipulation of the argument messagecontent leads to sqhttps://patchthecve.com/cve/CVE-2024-5589.htmlhttps://patchthecve.com/cve/CVE-2024-5589.htmlWed, 17 Jun 2026 08:16:14 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /admin/config_MT.php?action=delete. The manipulation of the argument Mid leads to sql injection. It is possible to initiate the attack remotelyhttps://patchthecve.com/cve/CVE-2024-3458.htmlhttps://patchthecve.com/cve/CVE-2024-3458.htmlWed, 17 Jun 2026 07:44:18 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /admin/add_ikev2.php. The manipulation of the argument TunnelId leads to sql injection. The attack can be initiated remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2024-3457.htmlhttps://patchthecve.com/cve/CVE-2024-3457.htmlWed, 17 Jun 2026 07:44:18 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/config_ISCGroupNoCache.php. The manipulation of the argument GroupId leads to sql injection. It is possible to initiate the attack remotely. Thehttps://patchthecve.com/cve/CVE-2024-3456.htmlhttps://patchthecve.com/cve/CVE-2024-3456.htmlWed, 17 Jun 2026 07:44:18 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/config_Anticrack.php. The manipulation of the argument GroupId leads to sql injection. The attack may be launched remhttps://patchthecve.com/cve/CVE-2024-3455.htmlhttps://patchthecve.com/cve/CVE-2024-3455.htmlWed, 17 Jun 2026 07:44:18 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add_postlogin.php. The manipulation of the argument SingleLoginId leads to sql injection. The attack can be https://patchthecve.com/cve/CVE-2024-30867.htmlhttps://patchthecve.com/cve/CVE-2024-30867.htmlWed, 17 Jun 2026 07:27:27 +0000CRITICAL 9.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_virtual_site_info.php.https://patchthecve.com/cve/CVE-2024-30863.htmlhttps://patchthecve.com/cve/CVE-2024-30863.htmlWed, 17 Jun 2026 07:27:26 +0000MEDIUM 6.3: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.https://patchthecve.com/cve/CVE-2024-30862.htmlhttps://patchthecve.com/cve/CVE-2024-30862.htmlWed, 17 Jun 2026 07:27:26 +0000HIGH 8.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/index.php.https://patchthecve.com/cve/CVE-2024-30861.htmlhttps://patchthecve.com/cve/CVE-2024-30861.htmlWed, 17 Jun 2026 07:27:26 +0000MEDIUM 5.3: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/configguide/ipsec_guide_1.php.https://patchthecve.com/cve/CVE-2024-30860.htmlhttps://patchthecve.com/cve/CVE-2024-30860.htmlWed, 17 Jun 2026 07:27:25 +0000HIGH 8.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/export_excel_user.php.https://patchthecve.com/cve/CVE-2024-30859.htmlhttps://patchthecve.com/cve/CVE-2024-30859.htmlWed, 17 Jun 2026 07:27:25 +0000HIGH 8.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupSSLCert.php.https://patchthecve.com/cve/CVE-2024-30858.htmlhttps://patchthecve.com/cve/CVE-2024-30858.htmlWed, 17 Jun 2026 07:27:25 +0000CRITICAL 9.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_fire_wall.php.https://patchthecve.com/cve/CVE-2024-30866.htmlhttps://patchthecve.com/cve/CVE-2024-30866.htmlWed, 17 Jun 2026 07:27:26 +0000MEDIUM 5.4: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /3g/menu.php.https://patchthecve.com/cve/CVE-2024-30865.htmlhttps://patchthecve.com/cve/CVE-2024-30865.htmlWed, 17 Jun 2026 07:27:26 +0000CRITICAL 9.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/edit_user_login.php.https://patchthecve.com/cve/CVE-2024-30864.htmlhttps://patchthecve.com/cve/CVE-2024-30864.htmlWed, 17 Jun 2026 07:27:26 +0000MEDIUM 6.3: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/config_ISCGroupTimePolicy.php.https://patchthecve.com/cve/CVE-2024-30872.htmlhttps://patchthecve.com/cve/CVE-2024-30872.htmlWed, 17 Jun 2026 07:27:27 +0000MEDIUM 5.1: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /include/authrp.php.https://patchthecve.com/cve/CVE-2024-30871.htmlhttps://patchthecve.com/cve/CVE-2024-30871.htmlWed, 17 Jun 2026 07:27:27 +0000HIGH 8.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/applyhardware.php.https://patchthecve.com/cve/CVE-2024-30870.htmlhttps://patchthecve.com/cve/CVE-2024-30870.htmlWed, 17 Jun 2026 07:27:27 +0000HIGH 8.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/address_interpret.php.https://patchthecve.com/cve/CVE-2024-30868.htmlhttps://patchthecve.com/cve/CVE-2024-30868.htmlWed, 17 Jun 2026 07:27:27 +0000CRITICAL 9.8: netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /admin/add_getlogin.php.https://patchthecve.com/cve/CVE-2024-3041.htmlhttps://patchthecve.com/cve/CVE-2024-3041.htmlWed, 17 Jun 2026 07:43:11 +0000MEDIUM 6.3: A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclhttps://patchthecve.com/cve/CVE-2024-3040.htmlhttps://patchthecve.com/cve/CVE-2024-3040.htmlWed, 17 Jun 2026 07:43:11 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_crl_conf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploithttps://patchthecve.com/cve/CVE-2024-28521.htmlhttps://patchthecve.com/cve/CVE-2024-28521.htmlWed, 17 Jun 2026 07:21:28 +0000HIGH 7.8: SQL Injection vulnerability in Netcome NS-ASG Application Security Gateway v.6.3.1 allows a local attacker to execute arbitrary code and obtain sensitive information via a crafted script to the loginid parameter of the /singlelogin.php component.https://patchthecve.com/cve/CVE-2024-2649.htmlhttps://patchthecve.com/cve/CVE-2024-2649.htmlWed, 17 Jun 2026 07:24:58 +0000MEDIUM 6.3: A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /protocol/iscdevicestatus/deleteonlineuser.php. The manipulation of the argument messagecontent leads to sql injectiohttps://patchthecve.com/cve/CVE-2024-2648.htmlhttps://patchthecve.com/cve/CVE-2024-2648.htmlWed, 17 Jun 2026 07:24:57 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /nac/naccheck.php. The manipulation of the argument username leads to improper neutralization of data within xpath expressions. It is posshttps://patchthecve.com/cve/CVE-2024-2647.htmlhttps://patchthecve.com/cve/CVE-2024-2647.htmlWed, 17 Jun 2026 07:24:57 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in Netentsec NS-ASG Application Security Gateway 6.3. This issue affects some unknown processing of the file /admin/singlelogin.php. The manipulation of the argument loginId leads to sql injection. The attack may be initiated remotelyhttps://patchthecve.com/cve/CVE-2024-2646.htmlhttps://patchthecve.com/cve/CVE-2024-2646.htmlWed, 17 Jun 2026 07:24:57 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Netentsec NS-ASG Application Security Gateway 6.3. This vulnerability affects unknown code of the file /vpnweb/index.php?para=index. The manipulation of the argument check_VirtualSiteId leads to sql injection. The attack can be initiated remotely. https://patchthecve.com/cve/CVE-2024-2645.htmlhttps://patchthecve.com/cve/CVE-2024-2645.htmlWed, 17 Jun 2026 07:24:57 +0000MEDIUM 4.3: A vulnerability classified as problematic has been found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /vpnweb/resetpwd/resetpwd.php. The manipulation of the argument UserId leads to improper neutralization of data within xpath expressions. It is posshttps://patchthecve.com/cve/CVE-2024-2644.htmlhttps://patchthecve.com/cve/CVE-2024-2644.htmlWed, 17 Jun 2026 07:24:57 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/addfirewall.php. The manipulation of the argument FireWallTableArray leads to sql injection. The attack mhttps://patchthecve.com/cve/CVE-2024-2330.htmlhttps://patchthecve.com/cve/CVE-2024-2330.htmlWed, 17 Jun 2026 07:24:19 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/index.php. The manipulation of the argument IPAddr leads to sql injection. It is possible to initiate the attack remotely. The exploihttps://patchthecve.com/cve/CVE-2024-2329.htmlhttps://patchthecve.com/cve/CVE-2024-2329.htmlWed, 17 Jun 2026 07:24:19 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/list_resource_icon.php?action=delete. The manipulation of the argument IconId leads to sql injection. The attack may be lhttps://patchthecve.com/cve/CVE-2024-2022.htmlhttps://patchthecve.com/cve/CVE-2024-2022.htmlWed, 17 Jun 2026 07:23:34 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/list_ipAddressPolicy.php. The manipulation of the argument GroupId leads to sql injection. The attack can behttps://patchthecve.com/cve/CVE-2024-2021.htmlhttps://patchthecve.com/cve/CVE-2024-2021.htmlWed, 17 Jun 2026 07:23:34 +0000MEDIUM 6.3: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. Affected is an unknown function of the file /admin/list_localuser.php. The manipulation of the argument ResId leads to sql injection. It is possible to launch the attack remotely. The https://patchthecve.com/cve/CVE-2023-7161.htmlhttps://patchthecve.com/cve/CVE-2023-7161.htmlWed, 17 Jun 2026 06:52:12 +0000HIGH 7.3: A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.php?para=index of the component Login. The manipulation of the argument check_VirtualSiteId leads to sql injection. It is possible to initiate https://patchthecve.com/cve/CVE-2023-7094.htmlhttps://patchthecve.com/cve/CVE-2023-7094.htmlWed, 17 Jun 2026 06:52:03 +0000MEDIUM 5.3: A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected by this vulnerability is an unknown functionality of the file /protocol/nsasg6.0.tgz. The manipulation leads to information disclosure. The attack can be launched remotely. The exploit https://patchthecve.com/cve/CVE-2023-6903.htmlhttps://patchthecve.com/cve/CVE-2023-6903.htmlWed, 17 Jun 2026 06:51:39 +0000HIGH 7.3: A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file /admin/singlelogin.php?submit=1. The manipulation of the argument loginId leads to sql injection. It is possible to initiate the attack remotely. Thehttps://patchthecve.com/cve/CVE-2023-5826.htmlhttps://patchthecve.com/cve/CVE-2023-5826.htmlWed, 17 Jun 2026 06:49:27 +0000MEDIUM 5.5: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/list_onlineuser.php. The manipulation of the argument SessionId leads to sql injection. The exploit has been disclosed tohttps://patchthecve.com/cve/CVE-2023-5785.htmlhttps://patchthecve.com/cve/CVE-2023-5785.htmlWed, 17 Jun 2026 06:49:21 +0000MEDIUM 5.5: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been classified as critical. This affects an unknown part of the file /protocol/firewall/addaddress_interpret.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has been disclhttps://patchthecve.com/cve/CVE-2023-5784.htmlhttps://patchthecve.com/cve/CVE-2023-5784.htmlWed, 17 Jun 2026 06:49:21 +0000MEDIUM 5.5: A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality of the file /protocol/firewall/uploadfirewall.php. The manipulation of the argument messagecontent leads to sql injection. The exploit has bhttps://patchthecve.com/cve/CVE-2023-5700.htmlhttps://patchthecve.com/cve/CVE-2023-5700.htmlWed, 17 Jun 2026 06:49:10 +0000MEDIUM 5.5: A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected is an unknown function of the file /protocol/iscgwtunnel/uploadiscgwrouteconf.php. The manipulation of the argument GWLinkId leads to sql injection. The exploit has been disclohttps://patchthecve.com/cve/CVE-2023-5681.htmlhttps://patchthecve.com/cve/CVE-2023-5681.htmlWed, 17 Jun 2026 06:49:04 +0000MEDIUM 4.7: A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_addr_fwresource_ip.php. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2023-40850.htmlhttps://patchthecve.com/cve/CVE-2023-40850.htmlWed, 17 Jun 2026 06:19:44 +0000HIGH 7.5: netentsec NS-ASG 6.3 is vulnerable to Incorrect Access Control. There is a file leak in the website source code of the application security gateway.