Lucene search
K

3851 matches found

CVE
CVE
added 2022/03/29 4:37 p.m.88 views

CVE-2022-25980

Delta Electronics DIAEnergie is affected by a blind SQL injection vulnerability in HandlerCommon.ashx across all versions prior to 1.9, allowing an attacker to inject arbitrary SQL, access/modify data, and execute system commands. The issue is confirmed in the connected documents, which also list...

10CVSS9.8AI score0.01172EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2022/03/29 4:37 p.m.76 views

CVE-2022-26059

Delta Electronics DIAEnergie is affected by CVE-2022-26059: a blind SQL injection in GetQueryData allows an attacker to inject arbitrary SQL, retrieve/modify database contents, and execute system commands in all versions prior to 1.8.02.004 (per initial description) and up to at least 1.9 per ICS...

10CVSS9.8AI score0.01172EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/29 4:37 p.m.6 views

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.8AI score0.01172EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/03/29 4:37 p.m.22 views

CVE-2022-26059 Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie All versions prior to 1.8.02.004 has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands...

9.8CVSS9.9AI score0.01172EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.4 views

Delta Electronics DIAEnergie 代码问题漏洞

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A code issue...

7.8CVSS5.7AI score0.00235EPSS
Exploits0References3
CNVD
CNVD
added 2022/03/28 12:0 a.m.20 views

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-27550)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A SQL injection...

9.8CVSS3.4AI score0.01004EPSS
Exploits0References1
OSV
OSV
added 2022/03/25 7:15 p.m.0 views

CVE-2022-0988

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

7.5CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2022/03/25 7:15 p.m.14 views

CVE-2022-0988

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

7.5CVSS0.00498EPSS
Exploits0References1
OSV
OSV
added 2022/03/25 7:15 p.m.1 views

CVE-2021-44768

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

5.5CVSS6AI score0.00662EPSS
Exploits0References1
NVD
NVD
added 2022/03/25 7:15 p.m.8 views

CVE-2021-44768

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

6.1CVSS0.00662EPSS
Exploits0References1
Prion
Prion
added 2022/03/25 7:15 p.m.17 views

Default credentials

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

5CVSS7.7AI score0.00498EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/03/25 6:2 p.m.8 views

CVE-2021-44768 Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

6.1CVSS6.1AI score0.00662EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/03/25 6:2 p.m.13 views

CVE-2021-44768 Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft Version 1.01.30 and prior is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information...

6.1CVSS6.3AI score0.00662EPSS
Exploits0References1
CVE
CVE
added 2022/03/25 6:2 p.m.49 views

CVE-2021-44768

CVE-2021-44768 affects Delta Electronics CNCSoft (Versions 1.01.30 and prior). The vulnerability is an out-of-bounds read while processing a specific project file, which may allow information disclosure. The issue is not exploitable remotely according to the ICS advisory. Affected users are advis...

6.1CVSS5.5AI score0.00662EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2022/03/25 6:2 p.m.14 views

CVE-2022-0988 Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

7.1CVSS7.5AI score0.00498EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2022/03/25 6:2 p.m.6 views

CVE-2022-0988 Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product...

7.1CVSS6.9AI score0.00498EPSS
Exploits0References1
CVE
CVE
added 2022/03/25 6:2 p.m.93 views

CVE-2022-0988

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission because the web app runs by default on HTTP. An attacker could remotely read transmitted client–product data. Public sources (NVD, CVE-2022-0988) indicate a cleartext exposure with a CVSS v3 base score ...

7.5CVSS7.1AI score0.00498EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2022/03/24 12:0 a.m.10 views

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-27438)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.Delta Electronics...

10CVSS3.6AI score0.01172EPSS
Exploits0References1
CNVD
CNVD
added 2022/03/24 12:0 a.m.13 views

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-27557)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.A SQL injection...

10CVSS3.8AI score0.01172EPSS
Exploits0References1
CNVD
CNVD
added 2022/03/24 12:0 a.m.13 views

Delta Electronics DIAEnergie SQL Injection Vulnerability (CNVD-2022-27435)

Delta Electronics DIAEnergie is an industrial energy management system used to monitor and analyze energy consumption in real time, calculate energy consumption and load characteristics, optimize equipment performance, improve production processes, and maximize energy efficiency.Delta Electronics...

10CVSS3.4AI score0.01172EPSS
Exploits0References1
Rows per page
Query Builder