Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,863

CVE-2021-27476

Rockwell Automation FactoryTalk AssetCentre OS Command Injection

A vulnerability exists in the SaveConfigFile function of the RACompare Service, which may allow for OS command injection. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary commands in Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier.

CVSS 3.1 · 10 Critical EPSS 4.1% KEV · Not listed
Vendors
Rockwellautomation
Products
Factorytalk Assetcentre
CVE-2021-44477

GE Gas Power ToolBoxST Improper Restriction of XML External Entity Reference

GE Gas Power ToolBoxST Version v04.07.05C suffers from an XML external entity (XXE) vulnerability using the DTD parameter entities technique that could result in disclosure and retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. The vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the XML project/template file.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Ge
Products
Toolboxst
CVE-2022-0988

Delta Electronics DIAEnergie CLEARTEXT Transmission of Sensitive Information

Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2021-44768

Delta Electronics CNCSoft Out-of-bounds Read

Delta Electronics CNCSoft (Version 1.01.30) and prior) is vulnerable to an out-of-bounds read while processing a specific project file, which may allow an attacker to disclose information.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Deltaww
Products
Cncsoft Screeneditor
CVE-2022-26059

Delta Electronics DIAEnergie SQL Injection in GetQueryData

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-25980

Delta Electronics DIAEnergie SQL Injection in HandlerCommon.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-25347

Delta Electronics DIAEnergie Path Traversal

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.

CVSS 3.1 · 9.8 Critical EPSS 11.4% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26069

Delta Electronics DIAEnergie SQL Injection in HandlerPage_KID.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-0923

Delta Electronics DIAEnergie SQL Injection in HandlerDialog_KID.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.0% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-25880

Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerTag_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26013

Delta Electronics DIAEnergie SQL Injection in DIAE_dmdsetHandler.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 9.1% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26065

Delta Electronics DIAEnergie SQL Injection in GetLatestDemandNode and GetDemandAnalysisData

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26349

Delta Electronics DIAEnergie SQL Injection in DIAE_eccoefficientHandler.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26836

Delta Electronics DIAEnergie SQL Injection in HandlerExport.ashx/Calendar.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26887

Delta Electronics DIAEnergie SQL Injection in DIAE_HandlerTag_KID.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 9.0% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26666

Delta Electronics DIAEnergie SQL Injection in HandlerDialogECC.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26514

Delta Electronics DIAEnergie SQL Injection in DIAE_tagHandler.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26338

Delta Electronics DIAEnergie SQL Injection in DIAE_hierarchyHandler.ashx

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerPageP_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-26667

Delta Electronics DIAEnergie SQL Injection in GetDemandAnalysisData

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie
CVE-2022-27175

Delta Electronics DIAEnergie SQL Injection in GetCalcTagList

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Deltaww
Products
Diaenergie