Vulnerability index

Browse CVEs

286 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Diaenergie CRITICAL 9.8
CVE-2022-1378EPSS 19%

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_pgHandler.ashx. This allows an…

Fix: 1.8.02.004+
Fix from $2,300 2022-05-02
Diaenergie CRITICAL 9.8
CVE-2022-1366EPSS 19%

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an a…

Fix: 1.8.02.004+
Fix from $2,300 2022-05-02
Asda Soft HIGH 7.8
CVE-2022-1403

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds wri…

Fix: after 5.4.1.0
Fix from $1,950 2022-04-29
Asda Soft HIGH 7.1
CVE-2022-1402

ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds rea…

Fix: after 5.4.1.0
Fix from $1,950 2022-04-29
Diaenergie HIGH 7.8
CVE-2022-1098

Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition. When combined with the Incorrect Default…

Fix: 1.8.02.004+
Fix from $1,950 2022-04-01
Diaenergie CRITICAL 9.8
CVE-2022-26666

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an att…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26667

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This al…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26836

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. T…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26887EPSS 10%

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allo…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-27175

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie HIGH 7.8
CVE-2022-26839

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which…

Fix: 1.8.02.004+
Fix from $1,950 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-0923

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This a…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-25880

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerTag_KID.ashx. This allows an…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-25980

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allow…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26013EPSS 9%

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx. This …

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26059

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData. This allows an a…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26065

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26069

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx. This all…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26338

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerPageP_KID.ashx. This allows …

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26349

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie CRITICAL 9.8
CVE-2022-26514

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This all…

Fix: 1.8.02.004+
Fix from $2,300 2022-03-29
Diaenergie HIGH 7.5
CVE-2022-25347EPSS 11%

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitra…

Fix: 1.8.02.004+
Fix from $1,950 2022-03-29
Diaenergie HIGH 7.5
CVE-2022-0988

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This c…

Fix: after 1.7.5
Fix from $1,950 2022-03-25
Cncsoft Screeneditor MEDIUM 5.5
CVE-2021-44768

Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may all…

Fix: after 1.01.30
Fix from $1,600 2022-03-25
Diaenergie MEDIUM 6.1
CVE-2021-23228

DIAEnergie Version 1.7.5 and prior is vulnerable to a reflected cross-site scripting attack through error pages that are returned by “.NET Request.Qu…

Fix: after 1.7.5
Fix from $1,600 2021-12-22
Diaenergie MEDIUM 6.1
CVE-2021-31558EPSS 11%

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the paramete…

Fix: after 1.7.5
Fix from $1,600 2021-12-22
Diaenergie MEDIUM 6.1
CVE-2021-44471

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the paramete…

Fix: after 1.7.5
Fix from $1,600 2021-12-22
Diaenergie MEDIUM 6.1
CVE-2021-44544EPSS 9%

DIAEnergie Version 1.7.5 and prior is vulnerable to multiple cross-site scripting vulnerabilities when arbitrary code is injected into the parameter …

Fix: after 1.7.5
Fix from $1,600 2021-12-22
Cncsoft HIGH 7.8
CVE-2021-43982EPSS 10%

Delta Electronics CNCSoft Versions 1.01.30 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrar…

Fix: after 1.01.30
Fix from $1,950 2021-12-09
Dialink HIGH 7.8
CVE-2021-38416

Delta Electronics DIALink versions 1.2.4.0 and prior insecurely loads libraries, which may allow an attacker to use DLL hijacking and takeover the sy…

Fix: after 1.2.4.0
Fix from $1,950 2021-11-03