4141 matches found
CVE-2022-42141
CVE-2022-42141 affects Delta Electronics DX-2100-L1-CN (v2.42); the issue is Cross Site Scripting (XSS) via the lform/urlfilter component. The available sources confirm XSS without details on a fixed version. The Red Hat and NVD records consistently describe a CXSS vulnerability with medium overa...
CVE-2022-42140
Delta Electronics DX-2100-L1-CN (firmware 2.42) is affected by CVE-2022-42140 due to an OS command injection vulnerability in the lform/net_diagnose component. The Red Hat/CISA entries indicate an authenticated OS command injection via the web configuration service, potentially enabling root comp...
PT-2022-6253 · Delta Electronics · Delta Electronics Dvw-W02W2-E2
Name of the Vulnerable Software and Affected Versions: Delta Electronics DVW-W02W2-E2 version 1.5.0.10 Description: The issue is related to a command injection vulnerability via crafted URLs in the web server of the Delta Electronics DVW-W02W2-E2 device. This vulnerability is due to the failure t...
Delta Electronics DX-2100RW-WW 跨站脚本漏洞
The Delta Electronics DX-2100RW-WW is a router from Delta Electronics China. A security vulnerability exists in the Delta Electronics DX-2100RW-WW version 2.42, which stems from its lform/urlfilter component that allows attackers to implement cross-site scripting...
Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS Vulnerabilities
Delta Electronics DX-2100-L1-CN version 1.5.0.10 suffers from command injection and cross site scripting vulnerabilities. ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version|...
Delta Electronics DVW-W02W2-E2 2.42 Command Injection Vulnerability
Delta Electronics DVW-W02W2-E2 version 2.42 suffers from an authenticated command injection vulnerability. ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed...
Delta Electronics DX-2100-L1-CN 1.5.0.10 Command Injection / XSS
CyberDanube Security Research 20221130-0 ------------------------------------------------------------------------------- title| Multiple Vulnerabilities product| Delta Electronics DX-2100-L1-CN vulnerable version| V1.5.0.10 fixed version| V1.5.0.12 CVE number| - impact| High homepage|...
Delta Electronics DVW-W02W2-E2 2.42 Command Injection
CyberDanube Security Research 20221130-1 ------------------------------------------------------------------------------- title| Authenticated Command Injection product| Delta Electronics DVW-W02W2-E2 vulnerable version| V2.42 fixed version| V2.5.2 CVE number| - impact| High homepage|...
CVE-2022-2969
Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname,...
CVE-2022-2969
Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname,...
Design/Logic Flaw
Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname,...
CVE-2022-2969
Delta Industrial Automation DIALink
CVE-2022-2969 ICSA-22-307-03 Delta Industrial Automation DIALink Path traversal
Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname,...
PT-2022-19784 · Delta Industrial Automation · Dialink
Name of the Vulnerable Software and Affected Versions: Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 Description: The issue arises from the software's failure to properly neutralize special elements within a pathname constructed from external input. This pathname is intend...
Delta Electronics InfraSuite Device Master Gateway Detection
Binary data deltaelectronicsidmgatewaydetect.nbin...
Delta Electronics InfraSuite Device Master Gateway Information Disclosure (CVE-2022-41629)
Binary data deltaelectronicsidmcve-2022-41629.nbin...
PT-2022-7155 · Delta Electronics · Cncsoft-B Dopsoft
Name of the Vulnerable Software and Affected Versions: Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior Description: The issue is related to a heap-based buffer overflow that could allow an attacker to execute arbitrary code. This occurs when processing DPA files, potentially...
GHSA-HC82-W9V8-83PR Witness Block Parsing DoS Vulnerability
Impact All lnd nodes before version v0.15.4 are vulnerable to a block parsing bug that can cause a node to enter a degraded state once encountered. In this degraded state, nodes can continue to make payments and forward HTLCs, and close out channels. Opening channels is prohibited, and also on...