İçeriğe atla
Noroxi

deltaww kayıtları

deltaww üreticisine ait 295 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %0,3
Silahlaştırılmış
4 · %1,4
Pre-auth RCE
37
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
342 gün

Tüm kayıtlar

295 kayıt
  • Delta Electronics DOPSoft 2 Out-of-Bounds Write

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %76

    deltaww · dopsoft17 Eyl 2021

  • CVE-2018-10594
    60Bu hafta

    Delta Industrial Automation COMMGR from Delta Electronics versions 1.08 and prior with accompanying PLC Simulators (DVPSimulator EH2, EH3, E

    KritikCVSS 9,8SilahlaştırılmışEPSS %69

    deltaww · commgr26 Haz 2018

  • CVE-2023-1133
    54Planlayın

    Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on por

    KritikCVSS 9,8SilahlaştırılmışEPSS %50

    deltaww · infrasuite device master27 Mar 2023

  • CVE-2021-32955
    50Planlayın

    Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.

    KritikCVSS 9,8İstismar yokEPSS %37

    deltaww · diaenergie30 Ağu 2021

  • CVE-2024-4548
    48Planlayın

    Delta Electronics DIAEnergie SQL Injection

    KritikCVSS 9,8SilahlaştırılmışEPSS %29

    deltaww · diaenergie6 May 2024

  • CVE-2022-41772
    46Planlayın

    Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversa

    KritikCVSS 9,8İstismar yokEPSS %25

    deltaww · infrasuite device master31 Eki 2022

  • CVE-2022-41657
    45Planlayın

    Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be u

    KritikCVSS 9,8İstismar yokEPSS %21

    deltaww · infrasuite device master31 Eki 2022

  • CVE-2022-43775
    45Planlayın

    The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on

    KritikCVSS 9,8İstismar yokEPSS %21

    deltaww · diaenergie26 Eki 2022

  • CVE-2021-38390
    45Planlayın

    A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5

    KritikCVSS 9,8İstismar yokEPSS %20

    deltaww · diaenergie30 Ağu 2021

  • CVE-2022-1367
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2022-1366
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2022-1378
    45Planlayın

    Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx.

    KritikCVSS 9,8İstismar yokEPSS %19

    deltaww · diaenergie2 May 2022

  • CVE-2021-38393
    45Planlayın

    A Blind SQL injection vulnerability exists in the /DataHandler/HandlerAlarmGroup.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5

    KritikCVSS 9,8İstismar yokEPSS %18

    deltaww · diaenergie30 Ağu 2021

  • CVE-2022-38142
    44Planlayın

    Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway

    KritikCVSS 9,8İstismar yokEPSS %18

    deltaww · infrasuite device master31 Eki 2022

  • CVE-2023-47207
    44Planlayın

    Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

    KritikCVSS 9,8İstismar yokEPSS %17

    deltaww · infrasuite device master30 Kas 2023

  • CVE-2022-41133
    43Planlayın

    Delta Electronics DIAEnergie

    YüksekCVSS 8,8İstismar yokEPSS %27

    deltaww · diaenergie27 Eki 2022

  • CVE-2024-10456
    42Planlayın

    Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data

    KritikCVSS 9,3İstismar yokEPSS %18

    delta electronics · infrasuite device master30 Eki 2024

  • CVE-2022-26887
    42Planlayın

    Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashx

    KritikCVSS 9,8İstismar yokEPSS %10

    deltaww · diaenergie29 Mar 2022

  • CVE-2022-26013
    42Planlayın

    Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx

    KritikCVSS 9,8İstismar yokEPSS %9

    deltaww · diaenergie29 Mar 2022

  • CVE-2024-25574
    42Planlayın

    Delta Electronics DIAEnergie SQL Injection

    KritikCVSS 9,8İstismar yokEPSS %9

    deltaww · diaenergie1 Nis 2024

  • CVE-2022-42139
    40Planlayın

    Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL.

    YüksekCVSS 8,8İstismar yokEPSS %18

    deltaww · dvw-w02w2-e2 firmware13 Ara 2022

  • CVE-2021-32983
    40Planlayın

    A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and p

    KritikCVSS 9,8İstismar yokEPSS %4

    deltaww · diaenergie30 Ağu 2021

  • CVE-2018-8871
    40Planlayın

    In Delta Electronics Automation TPEditor version 1.89 or prior, parsing a malformed program file may cause heap-based buffer overflow vulner

    KritikCVSS 9,8İstismar yokEPSS %4

    deltaww · tpeditor25 May 2018

  • CVE-2018-10617
    40Planlayın

    Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior utilizes a fixed-length heap buffer where a value larger tha

    KritikCVSS 9,8İstismar yokEPSS %4

    deltaww · delta industrial automation dopsoft18 Haz 2018

  • CVE-2018-10623
    40Planlayın

    Delta Electronics Delta Industrial Automation DOPSoft version 4.00.04 and prior performs read operations on a memory buffer where the positi

    KritikCVSS 9,8İstismar yokEPSS %4

    deltaww · delta industrial automation dopsoft18 Haz 2018