CVE-2022-41775

Delta Electronics DIAEnergie is affected by a SQL injection in Handler_CFG.ashx for versions prior to v1.9.02.001. The vulnerability (CVE-2022-41775) allows network-based SQL queries with low attack complexity and low privileges, potentially impacting confidentiality, integrity, and availability ...

CVE-2022-43452 Delta Electronics DIAEnergie SQL Injection

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-41775 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerCFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43452

Delta Electronics DIAEnerg ie vulnerable to SQL injection in FtyInfoSetting.aspx for DIAEnergie before v1.9.02.001. The issue arises from improper handling of input in the web app, enabling an attacker with network access and low privileges to inject arbitrary SQL queries, potentially compromisin...

CVE-2022-43452 Delta Electronics DIAEnergie SQL Injection

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-41775 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerCFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43506

Delta Electronics DIAEnergie is affected by CVE-2022-43506, a SQL injection vulnerability in the HandlerTag_KID.ashx component affecting DIAEnergie versions prior to v1.9.02.001. The root cause is improper input handling that allows an attacker to inject arbitrary SQL via the network, potentially...

CVE-2022-43506 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerTagKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43506 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerTagKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43447 Delta Electronics DIAEnergie SQL Injection

SQL Injection in AMEBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43457 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerPageKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43457 Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerPageKID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

CVE-2022-43447

Summary: CVE-2022-43447 is a SQL injection vulnerability in Delta Electronics DIAEnergie. The issue affects DIAEnergie versions prior to v1.9.02.001 (and earlier pre–1.9.01.002, 1.9.02.001, 1.9.03.001 as per ICS updates) that process requests via web components, notably the AM_EBillAnalysis.aspx ...

CVE-2022-43457

CVE-2022-43457 is a SQL injection vulnerability in Delta Electronics DIAEnergie, specifically in HandlerPage_KID.ashx. Affected versions are prior to v1.9.02.001 (and referenced variants in update notes suggest gaps up to v1.9.03.001). Exploitation appears to be network-based with low attack comp...

CVE-2022-43447 Delta Electronics DIAEnergie SQL Injection

SQL Injection in AMEBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network...

Design/Logic Flaw

Lightning Network Daemon lnd is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments a...

CVE-2022-39389 Witness Block Parsing DoS Vulnerability in lnd

Lightning Network Daemon lnd is an implementation of a lightning bitcoin overlay network node. All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments a...

PT-2022-26925 · Delta Electronics · Diaenergie

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAEnergie versions prior to v1.9.02.001 Description: The issue allows an attacker to inject SQL queries via Network in FtyInfoSetting.aspx. Recommendations: For versions prior to v1.9.02.001, update to version v1.9.02.001 o...

PT-2022-26951 · Delta Electronics · Delta Electronics Diaenergie

Name of the Vulnerable Software and Affected Versions: Delta Electronics DIAEnergie versions prior to v1.9.02.001 Description: The issue allows an attacker to inject SQL queries via the network. This is related to SQL Injection in HandlerTag KID.ashx. Recommendations: For versions prior to...

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system from Delta Electronics Taiwan, China used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes and maximize...