Filtered by vendor Deltaww
Subscribe
Total
267 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2024-23494 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | N/A | 8.8 HIGH |
| SQL injection vulnerability exists in GetDIAE_unListParameters. | |||||
| CVE-2024-28891 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | N/A | 8.8 HIGH |
| SQL injection vulnerability exists in the script Handler_CFG.ashx. | |||||
| CVE-2024-23975 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | N/A | 8.8 HIGH |
| SQL injection vulnerability exists in GetDIAE_slogListParameters. | |||||
| CVE-2024-25567 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | N/A | 8.1 HIGH |
| Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten. | |||||
| CVE-2024-28040 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | N/A | 8.8 HIGH |
| SQL injection vulnerability exists in GetDIAE_astListParameters. | |||||
| CVE-2024-28045 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | N/A | 4.6 MEDIUM |
| Improper neutralization of input within the affected product could lead to cross-site scripting. | |||||
| CVE-2024-28171 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | N/A | 8.1 HIGH |
| It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten. | |||||
| CVE-2021-38406 | 1 Deltaww | 1 Dopsoft | 2025-10-30 | 6.8 MEDIUM | 7.8 HIGH |
| Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code in the context of the current process. | |||||
| CVE-2025-62579 | 1 Deltaww | 1 Asda Soft | 2025-10-28 | N/A | 7.8 HIGH |
| ASDA-Soft Stack-based Buffer Overflow Vulnerability | |||||
| CVE-2025-62580 | 1 Deltaww | 1 Asda Soft | 2025-10-28 | N/A | 7.8 HIGH |
| ASDA-Soft Stack-based Buffer Overflow Vulnerability | |||||
| CVE-2025-59297 | 1 Deltaww | 1 Diascreen | 2025-10-08 | N/A | 7.8 HIGH |
| Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. | |||||
| CVE-2025-59298 | 1 Deltaww | 1 Diascreen | 2025-10-08 | N/A | 7.8 HIGH |
| Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. | |||||
| CVE-2025-59299 | 1 Deltaww | 1 Diascreen | 2025-10-08 | N/A | 7.8 HIGH |
| Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. | |||||
| CVE-2025-59300 | 1 Deltaww | 1 Diascreen | 2025-10-08 | N/A | 7.8 HIGH |
| Delta Electronics DIAScreen lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. | |||||
| CVE-2025-58320 | 1 Deltaww | 1 Dialink | 2025-09-26 | N/A | 7.3 HIGH |
| Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability. | |||||
| CVE-2025-58321 | 1 Deltaww | 1 Dialink | 2025-09-26 | N/A | 10.0 CRITICAL |
| Delta Electronics DIALink has an Directory Traversal Authentication Bypass Vulnerability. | |||||
| CVE-2025-58319 | 1 Deltaww | 1 Cncsoft-g2 | 2025-09-25 | N/A | 7.8 HIGH |
| Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. | |||||
| CVE-2025-58317 | 1 Deltaww | 1 Cncsoft-g2 | 2025-09-25 | N/A | 7.8 HIGH |
| Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process. | |||||
| CVE-2025-22884 | 1 Deltaww | 1 Ispsoft | 2025-08-25 | N/A | 7.8 HIGH |
| Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to execute arbitrary code when parsing DVP file. | |||||
| CVE-2025-22882 | 1 Deltaww | 1 Ispsoft | 2025-08-25 | N/A | 7.8 HIGH |
| Delta Electronics ISPSoft version 3.20 is vulnerable to a Stack-Based buffer overflow vulnerability that could allow an attacker to leverage debugging logic to execute arbitrary code when parsing CBDGL file. | |||||