Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 93

Export CSV
CVE-2022-41773

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in CheckDIACloud. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

CVSS 3.1 · 8.8 High EPSS 8.1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-41133

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a SQL injection that exists in GetDIAE_line_message_settingsListParameters. A low-privileged authenticated attacker could exploit this issue to inject arbitrary SQL queries.

CVSS 3.1 · 8.8 High EPSS 27.1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-41651

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the SetPF API.

CVSS 3.1 · 8.7 High EPSS 11.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-41702

Delta Electronics DIAEnergie

The affected product DIAEnergie (versions prior to v1.9.01.002) is vulnerable to a stored cross-site scripting vulnerability through the InsertReg API.

CVSS 3.1 · 8.7 High EPSS 11.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-43447

Delta Electronics DIAEnergie SQL Injection

SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-43452

Delta Electronics DIAEnergie SQL Injection

SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

CVSS 3.1 · 8.8 High EPSS 7.7% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-41775

Delta Electronics DIAEnergie SQL Injection

SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-43506

Delta Electronics DIAEnergie SQL Injection

SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-0988

Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26059

Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-25980

Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-25347

Delta Electronics DIAEnergie Path Traversal

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.

CVSS 3.1 · 9.8 Critical EPSS 11.4% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26069

Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-0923

Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-25880

Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerTag_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26013

Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 9.1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26065

Delta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisData

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26349

Delta Electronics DIAEnergie SQL Injection in DIAE_eccoefficientHandler.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26836

Delta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26887

Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 9.0% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie