deltaww kayıtları
deltaww üreticisine ait 295 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 1 · %0,3
- Silahlaştırılmış
- 4 · %1,4
- Pre-auth RCE
- 37
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 342 gün
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')50
- CWE-121 Stack-based Buffer Overflow42
- CWE-787 Out-of-bounds Write36
- CWE-125 Out-of-bounds Read22
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')22
- CWE-122 Heap-based Buffer Overflow16
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
295 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
84Hemen | CVE-2021-38406Silahlaştırılmış | Delta Electronics DOPSoft 2 Out-of-Bounds Writedeltaww · dopsoft · CWE-787 | Yüksek7,8 | KEV | %76,4 | 17 Eyl 2021 |
60Bu hafta | CVE-2018-10594Silahlaştırılmış | Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, Edeltaww · commgr · CWE-121 | Kritik9,8 | — | %68,6 | 26 Haz 2018 |
54Planlayın | CVE-2023-1133Silahlaştırılmış | Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on pordeltaww · infrasuite device master · CWE-502 | Kritik9,8 | — | %50,1 | 27 Mar 2023 |
50Planlayın | CVE-2021-32955İstismar yok | Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.deltaww · diaenergie · CWE-434 | Kritik9,8 | — | %37,3 | 30 Ağu 2021 |
48Planlayın | CVE-2024-4548Silahlaştırılmış | Delta Electronics DIAEnergie SQL Injectiondeltaww · diaenergie · CWE-20 | Kritik9,8 | — | %29,4 | 6 May 2024 |
46Planlayın | CVE-2022-41772İstismar yok | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversadeltaww · infrasuite device master · CWE-22 | Kritik9,8 | — | %24,9 | 31 Eki 2022 |
45Planlayın | CVE-2022-41657İstismar yok | Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be udeltaww · infrasuite device master · CWE-22 | Kritik9,8 | — | %20,9 | 31 Eki 2022 |
45Planlayın | CVE-2022-43775İstismar yok | The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution ondeltaww · diaenergie · CWE-89 | Kritik9,8 | — | %20,6 | 26 Eki 2022 |
45Planlayın | CVE-2021-38390İstismar yok | A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5deltaww · diaenergie · CWE-89 | Kritik9,8 | — | %19,8 | 30 Ağu 2021 |
45Planlayın | CVE-2022-1367İstismar yok | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx.deltaww · diaenergie · CWE-89 | Kritik9,8 | — | %19,3 | 2 May 2022 |
45Planlayın | CVE-2022-1366İstismar yok | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx.deltaww · diaenergie · CWE-89 | Kritik9,8 | — | %19,3 | 2 May 2022 |
45Planlayın | CVE-2022-1378İstismar yok | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx.deltaww · diaenergie · CWE-89 | Kritik9,8 | — | %19,3 | 2 May 2022 |
45Planlayın | CVE-2021-38393İstismar yok | A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5deltaww · diaenergie · CWE-89 | Kritik9,8 | — | %18,5 | 30 Ağu 2021 |
44Planlayın | CVE-2022-38142İstismar yok | Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway deltaww · infrasuite device master · CWE-502 | Kritik9,8 | — | %18,2 | 31 Eki 2022 |
44Planlayın | CVE-2023-47207İstismar yok | Delta Electronics InfraSuite Device Master Deserialization of Untrusted Datadeltaww · infrasuite device master · CWE-502 | Kritik9,8 | — | %16,6 | 30 Kas 2023 |
43Planlayın | CVE-2022-41133İstismar yok | Delta Electronics DIAEnergiedeltaww · diaenergie · CWE-89 | Yüksek8,8 | — | %26,6 | 27 Eki 2022 |
42Planlayın | CVE-2024-10456İstismar yok | Delta Electronics InfraSuite Device Master Deserialization of Untrusted Datadelta electronics · infrasuite device master · CWE-502 | Kritik9,3 | — | %17,6 | 30 Eki 2024 |
42Planlayın | CVE-2022-26887İstismar yok | Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashxdeltaww · diaenergie · CWE-89 | Kritik9,8 | — | %9,7 | 29 Mar 2022 |
42Planlayın | CVE-2022-26013İstismar yok | Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashxdeltaww · diaenergie · CWE-89 | Kritik9,8 | — | %9,1 | 29 Mar 2022 |
42Planlayın | CVE-2024-25574İstismar yok | Delta Electronics DIAEnergie SQL Injectiondeltaww · diaenergie · CWE-89 | Kritik9,8 | — | %8,8 | 1 Nis 2024 |
40Planlayın | CVE-2022-42139İstismar yok | Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL.deltaww · dvw-w02w2-e2 firmware · CWE-78 | Yüksek8,8 | — | %18,2 | 13 Ara 2022 |
40Planlayın | CVE-2021-32983İstismar yok | A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and pdeltaww · diaenergie · CWE-89 | Kritik9,8 | — | %3,9 | 30 Ağu 2021 |
40Planlayın | CVE-2018-8871İstismar yok | In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulnerdeltaww · tpeditor · CWE-122 | Kritik9,8 | — | %3,9 | 25 May 2018 |
40Planlayın | CVE-2018-10617İstismar yok | Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger thadeltaww · delta industrial automation dopsoft · CWE-122 | Kritik9,8 | — | %3,5 | 18 Haz 2018 |
40Planlayın | CVE-2018-10623İstismar yok | Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the positideltaww · delta industrial automation dopsoft · CWE-125 | Kritik9,8 | — | %3,5 | 18 Haz 2018 |
- CVE-2021-3840684Hemen
Delta Electronics DOPSoft 2 Out-of-Bounds Write
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %76deltaww · dopsoft17 Eyl 2021
- CVE-2018-1059460Bu hafta
Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, E
KritikCVSS 9,8SilahlaştırılmışEPSS %69deltaww · commgr26 Haz 2018
- CVE-2023-113354Planlayın
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on por
KritikCVSS 9,8SilahlaştırılmışEPSS %50deltaww · infrasuite device master27 Mar 2023
- CVE-2021-3295550Planlayın
Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.
KritikCVSS 9,8İstismar yokEPSS %37deltaww · diaenergie30 Ağu 2021
- CVE-2024-454848Planlayın
Delta Electronics DIAEnergie SQL Injection
KritikCVSS 9,8SilahlaştırılmışEPSS %29deltaww · diaenergie6 May 2024
- CVE-2022-4177246Planlayın
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversa
KritikCVSS 9,8İstismar yokEPSS %25deltaww · infrasuite device master31 Eki 2022
- CVE-2022-4165745Planlayın
Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be u
KritikCVSS 9,8İstismar yokEPSS %21deltaww · infrasuite device master31 Eki 2022
- CVE-2022-4377545Planlayın
The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on
KritikCVSS 9,8İstismar yokEPSS %21deltaww · diaenergie26 Eki 2022
- CVE-2021-3839045Planlayın
A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5
KritikCVSS 9,8İstismar yokEPSS %20deltaww · diaenergie30 Ağu 2021
- CVE-2022-136745Planlayın
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx.
KritikCVSS 9,8İstismar yokEPSS %19deltaww · diaenergie2 May 2022
- CVE-2022-136645Planlayın
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx.
KritikCVSS 9,8İstismar yokEPSS %19deltaww · diaenergie2 May 2022
- CVE-2022-137845Planlayın
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx.
KritikCVSS 9,8İstismar yokEPSS %19deltaww · diaenergie2 May 2022
- CVE-2021-3839345Planlayın
A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5
KritikCVSS 9,8İstismar yokEPSS %18deltaww · diaenergie30 Ağu 2021
- CVE-2022-3814244Planlayın
Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway
KritikCVSS 9,8İstismar yokEPSS %18deltaww · infrasuite device master31 Eki 2022
- CVE-2023-4720744Planlayın
Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data
KritikCVSS 9,8İstismar yokEPSS %17deltaww · infrasuite device master30 Kas 2023
- CVE-2022-4113343Planlayın
Delta Electronics DIAEnergie
YüksekCVSS 8,8İstismar yokEPSS %27deltaww · diaenergie27 Eki 2022
- CVE-2024-1045642Planlayın
Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data
KritikCVSS 9,3İstismar yokEPSS %18delta electronics · infrasuite device master30 Eki 2024
- CVE-2022-2688742Planlayın
Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashx
KritikCVSS 9,8İstismar yokEPSS %10deltaww · diaenergie29 Mar 2022
- CVE-2022-2601342Planlayın
Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx
KritikCVSS 9,8İstismar yokEPSS %9deltaww · diaenergie29 Mar 2022
- CVE-2024-2557442Planlayın
Delta Electronics DIAEnergie SQL Injection
KritikCVSS 9,8İstismar yokEPSS %9deltaww · diaenergie1 Nis 2024
- CVE-2022-4213940Planlayın
Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL.
YüksekCVSS 8,8İstismar yokEPSS %18deltaww · dvw-w02w2-e2 firmware13 Ara 2022
- CVE-2021-3298340Planlayın
A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and p
KritikCVSS 9,8İstismar yokEPSS %4deltaww · diaenergie30 Ağu 2021
- CVE-2018-887140Planlayın
In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulner
KritikCVSS 9,8İstismar yokEPSS %4deltaww · tpeditor25 May 2018
- CVE-2018-1061740Planlayın
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger tha
KritikCVSS 9,8İstismar yokEPSS %4deltaww · delta industrial automation dopsoft18 Haz 2018
- CVE-2018-1062340Planlayın
Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the positi
KritikCVSS 9,8İstismar yokEPSS %4deltaww · delta industrial automation dopsoft18 Haz 2018