Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 313

Export CSV
CVE-2025-47728

File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Delta Electronics Deltaww
Products
Cncsoft-g2 Cncsoft-g2
CVE-2025-58317

File Parsing Memory Corruption in CNCSoft-G2

Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Delta Electronics Deltaww
Products
Cncsoft-g2 Cncsoft-g2
CVE-2022-3214

Delta Electronics DIAEnergy Use of Hard-coded Credentials

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.

CVSS 3.1 · 9.8 Critical EPSS 2.1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2025-59301

Modbus/TCP Dos Vulnerability in DVP15MC11T

Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Dvp15mc11t Dvp15mc11t Firmware
CVE-2024-23494

Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAE_unListParameters.

CVSS 3.1 · 8.8 High EPSS 8.5% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2024-28891

Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in the script Handler_CFG.ashx.

CVSS 3.1 · 8.8 High EPSS 8.5% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2024-23975

Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAE_slogListParameters.

CVSS 3.1 · 8.8 High EPSS 8.5% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2024-25567

Delta Electronics DIAEnergie Path traversal

Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2024-28040

Delta Electronics DIAEnergie SQL injection

SQL injection vulnerability exists in GetDIAE_astListParameters.

CVSS 3.1 · 8.8 High EPSS 8.5% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2024-28045

Delta Electronics DIAEnergie Cross-site scripting

Improper neutralization of input within the affected product could lead to cross-site scripting.

CVSS 3.1 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2024-28171

Delta Electronics DIAEnergie Path traversal

It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2021-38406

Delta Electronics DOPSoft 2 Out-of-Bounds Write

Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process.

CVSS 3.1 · 7.8 High EPSS 76.4% KEV · Listed
Vendors
Deltaww
Products
Dopsoft
CVE-2025-59297

File Parsing Out-Of-Bounds Write Vulnerability in DIAScreen

Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Delta Electronics Deltaww
Products
Diascreen Diascreen