Export limit exceeded: 407449 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (92 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-78312 | 1 Deltaww | 1 Diaenergie | 2026-09-24 | 9.1 Critical |
| Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. | ||||
| CVE-2026-78313 | 1 Deltaww | 1 Diaenergie | 2026-09-24 | 6.5 Medium |
| Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. | ||||
| CVE-2026-78311 | 1 Deltaww | 1 Diaenergie | 2026-09-24 | 8.8 High |
| SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. | ||||
| CVE-2026-78309 | 1 Deltaww | 1 Diaenergie | 2026-09-24 | 8.8 High |
| SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. | ||||
| CVE-2026-78308 | 1 Deltaww | 1 Diaenergie | 2026-09-24 | 9.8 Critical |
| Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022. | ||||
| CVE-2026-78310 | 1 Deltaww | 1 Diaenergie | 2026-09-24 | 4.3 Medium |
| Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022. | ||||
| CVE-2026-78317 | 1 Deltaww | 1 Diaenergie | 2026-08-24 | 8.8 High |
| SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. | ||||
| CVE-2026-78316 | 1 Deltaww | 1 Diaenergie | 2026-08-24 | 8.8 High |
| SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. | ||||
| CVE-2026-78315 | 1 Deltaww | 1 Diaenergie | 2026-08-24 | 8.8 High |
| SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. | ||||
| CVE-2026-78314 | 1 Deltaww | 1 Diaenergie | 2026-08-24 | 8.8 High |
| SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution. | ||||
| CVE-2022-3214 | 1 Deltaww | 1 Diaenergie | 2026-02-25 | 9.8 Critical |
| Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution. | ||||
| CVE-2024-23494 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | 8.8 High |
| SQL injection vulnerability exists in GetDIAE_unListParameters. | ||||
| CVE-2024-28891 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | 8.8 High |
| SQL injection vulnerability exists in the script Handler_CFG.ashx. | ||||
| CVE-2024-23975 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | 8.8 High |
| SQL injection vulnerability exists in GetDIAE_slogListParameters. | ||||
| CVE-2024-25567 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | 8.1 High |
| Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten. | ||||
| CVE-2024-28040 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | 8.8 High |
| SQL injection vulnerability exists in GetDIAE_astListParameters. | ||||
| CVE-2024-28045 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | 4.6 Medium |
| Improper neutralization of input within the affected product could lead to cross-site scripting. | ||||
| CVE-2024-28171 | 1 Deltaww | 1 Diaenergie | 2025-11-05 | 8.1 High |
| It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten. | ||||
| CVE-2025-57703 | 2 Delta Electronics, Deltaww | 2 Diaview, Diaenergie | 2025-08-21 | 6.1 Medium |
| DIAEnergie - Reflected Cross-site Scripting | ||||
| CVE-2025-57702 | 2 Delta Electronics, Deltaww | 2 Diaview, Diaenergie | 2025-08-21 | 6.1 Medium |
| DIAEnergie - Reflected Cross-site Scripting | ||||