CVE-2024-2649: Medium SQL Injection in Netentsec NS-ASG 6.3
CVE-2024-2649 is a medium severity SQL injection in Netentsec NS-ASG Application Security Gateway 6.3. The vendor did not respond; restrict access.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2024-2649 is a medium severity SQL injection in Netentsec NS-ASG Application Security Gateway 6.3. The vendor did not respond; restrict access.
CVE-2024-2647 is a high severity SQL injection in Netentsec NS-ASG Application Security Gateway 6.3. The vendor did not respond; restrict access.
CVE-2024-2646 is a medium severity SQL injection in Netentsec NS-ASG Application Security Gateway 6.3. The vendor did not respond; restrict access.
CVE-2024-2644 is a medium severity SQL injection in Netentsec NS-ASG Application Security Gateway 6.3. The vendor did not respond; restrict access.
CVE-2024-2627 is a use after free in Chrome Canvas before 123.0.6312.58. NVD says High and Chromium says Medium. Update to 123.0.6312.58 or later.
CVE-2024-2625 is a high severity object lifecycle flaw in V8 in Chrome before 123.0.6312.58. Update Chrome to 123.0.6312.58 or later and restart the browser.
CVE-2024-2624 is a critical path traversal and file upload flaw in lollms-webui, fixed in version 9.4. Upgrade to 9.4 or later and keep the UI off the internet.
CVE-2024-2622 is a medium SQL injection in the Fujian Kelixin Communication Command and Dispatch Platform. No fixed version is confirmed; restrict access.
CVE-2024-2621 is a medium SQL injection in the Fujian Kelixin Communication Command and Dispatch Platform. No fixed version is confirmed; restrict access.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.