CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2024-25567 | HOCH8.8 |
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.
| 21/03/2024 |
| CVE-2024-23975 | HOCH8.8 |
SQL injection vulnerability exists in GetDIAE_slogListParameters.
| 21/03/2024 |
| CVE-2024-23494 | HOCH8.8 |
SQL injection vulnerability exists in GetDIAE_unListParameters.
| 21/03/2024 |
| CVE-2024-28891 | HOCH8.8 |
SQL injection vulnerability exists in the script Handler_CFG.ashx.
| 21/03/2024 |
| CVE-2024-28029 | HOCH8.8 | Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality. | 21/03/2024 |
| CVE-2024-25937 | HOCH8.8 |
SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.
| 21/03/2024 |
| CVE-2024-1941 | HOCH7.8 |
Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
| 01/03/2024 |
| CVE-2024-1595 | HOCH7.8 | Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82
insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.
| 29/02/2024 |
| CVE-2023-5131 | HOCH8.8 | A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
| 18/01/2024 |
| CVE-2023-5130 | HOCH8.8 | A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
| 18/01/2024 |
| CVE-2023-43824 | HOCH7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43823 | HOCH7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43822 | HOCH7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |
| CVE-2023-43821 | HOCH7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |
| CVE-2023-43820 | HOCH7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43819 | HOCH7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMacroLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |