Browse CVEs

HIGH 7.5 CVE-2025-62578 DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information Dvp 12se Firmware Mitigation only Fix from $1,9502025-12-26 HIGH 7.8 CVE-2024-47962 Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An… Cncsoft G2 Mitigation only Fix from $1,9502024-10-10 HIGH 7.8 CVE-2024-47963 Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attac… Cncsoft G2 Mitigation only Fix from $1,9502024-10-10 HIGH 7.8 CVE-2024-47964 Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An … Cncsoft G2 Mitigation only Fix from $1,9502024-10-10 HIGH 7.8 CVE-2024-47965 Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attack… Cncsoft G2 Mitigation only Fix from $1,9502024-10-10 HIGH 7.8 CVE-2024-47966 Delta Electronics CNCSoft-G2 lacks proper initialization of memory prior to accessing it. An attacker can manipulate users to visit a malicious page … Cncsoft G2 Mitigation only Fix from $1,9502024-10-10 HIGH 8.8 CVE-2024-39882 Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. If a targ… Cncsoft G2 Mitigation only Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-39883 Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If … Cncsoft G2 No fix yet Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-39880 Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. If… Cncsoft G2 Mitigation only Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-39881 Delta Electronics CNCSoft-G2 lacks proper validation of user-supplied data, which can result in a memory corruption condition. If a target visits a m… Cncsoft G2 Mitigation only Fix from $1,9502024-07-09 HIGH 8.8 CVE-2024-34032EPSS 9% Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint. An authenticated attacker c… Diaenergie Mitigation only Fix from $1,9502024-05-03 HIGH 8.8 CVE-2024-34033 Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the in… Diaenergie Mitigation only Fix from $1,9502024-05-03 HIGH 8.8 CVE-2024-34031 Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx. An authenticated attacker ca… Diaenergie Mitigation only Fix from $1,9502024-05-03 HIGH 8.8 CVE-2023-5131 A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a special… Ispsoft Mitigation only Fix from $1,9502024-01-18 HIGH 8.8 CVE-2023-5130 A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open … Wplsoft Mitigation only Fix from $1,9502024-01-18 HIGH 7.8 CVE-2023-5944 Delta Electronics DOPSoft is vulnerable to a stack-based buffer overflow, which may allow for arbitrary code execution if an attacker can lead a legi… Dopsoft Mitigation only Fix from $1,9502023-12-04 HIGH 7.5 CVE-2023-47279 In Delta Electronics InfraSuite Device Master v.1.0.7, A vulnerability exists that allows an unauthenticated attacker to disclose user information th… Infrasuite Device Master Mitigation only Fix from $1,9502023-11-30 CRITICAL 9.8 CVE-2023-47207EPSS 17% In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute code with local admi… Infrasuite Device Master Mitigation only Fix from $2,3002023-11-30 HIGH 8.8 CVE-2023-46690 In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the fil… Infrasuite Device Master Mitigation only Fix from $1,9502023-11-30 CRITICAL 9.8 CVE-2023-39226 In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an unauthenticated attacker to execute arbitrary code throu… Infrasuite Device Master Mitigation only Fix from $2,3002023-11-30 MEDIUM 5.9 CVE-2023-5461 A vulnerability was found in Delta Electronics WPLSoft 2.51. It has been classified as problematic. Affected is an unknown function of the component … Wplsoft Mitigation only Fix from $1,6002023-10-09 HIGH 7.5 CVE-2023-5459 A vulnerability has been found in Delta Electronics DVP32ES2 PLC 1.48 and classified as critical. This vulnerability affects unknown code of the comp… Dvp32es200r Firmware Mitigation only Fix from $1,9502023-10-09 HIGH 8.8 CVE-2023-0444 A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Onl… Infrasuite Device Master Mitigation only Fix from $1,9502023-01-26 HIGH 7.5 CVE-2022-2966 Out-of-bounds Read vulnerability in Delta Electronics DOPSoft.This issue affects DOPSoft: All Versions. Dopsoft No fix yet Fix from $1,9502022-12-16 HIGH 8.8 CVE-2022-42139EPSS 18% Delta Electronics DVW-W02W2-E2 1.5.0.10 is vulnerable to Command Injection via Crafted URL. Dvw W02w2 E2 Firmware No fix yet Fix from $1,9502022-12-14 HIGH 7.2 CVE-2022-42140 Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Command Injection via lform/net_diagnose. Dx 2100 L1 Cn Firmware No fix yet Fix from $1,9502022-12-14 MEDIUM 5.4 CVE-2022-42141 Delta Electronics DX-2100-L1-CN 2.42 is vulnerable to Cross Site Scripting (XSS) via lform/urlfilter. Dx 2100 L1 Cn Firmware No fix yet Fix from $1,6002022-12-14 CRITICAL 9.8 CVE-2022-43774 The HandlerPageP_KID class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a… Diaenergie Mitigation only Fix from $2,3002022-10-26 CRITICAL 9.8 CVE-2022-43775EPSS 21% The HICT_Loop class in Delta Electronics DIAEnergy v1.9 contains a SQL Injection flaw that could allow an attacker to gain code execution on a remote… Diaenergie Mitigation only Fix from $2,3002022-10-26 MEDIUM 6.1 CVE-2022-33005 A cross-site scripting (XSS) vulnerability in the System Settings/IOT Settings module of Delta Electronics DIAEnergie v1.08.00 allows attackers to ex… Diaenergie No fix yet Fix from $1,6002022-06-27