CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CVE-2024-25567 |
| 높음8.8 |
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.
|
| 21/03/2024 |
| CVE-2024-23975 | 높음8.8 |
SQL injection vulnerability exists in GetDIAE_slogListParameters.
| 21/03/2024 |
| CVE-2024-23494 | 높음8.8 |
SQL injection vulnerability exists in GetDIAE_unListParameters.
| 21/03/2024 |
| CVE-2024-28891 | 높음8.8 |
SQL injection vulnerability exists in the script Handler_CFG.ashx.
| 21/03/2024 |
| CVE-2024-28029 | 높음8.8 | Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality. | 21/03/2024 |
| CVE-2024-25937 | 높음8.8 |
SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.
| 21/03/2024 |
| CVE-2024-1941 | 높음7.8 |
Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
| 01/03/2024 |
| CVE-2024-1595 | 높음7.8 | Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82
insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.
| 29/02/2024 |
| CVE-2023-5131 | 높음8.8 | A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
| 18/01/2024 |
| CVE-2023-5130 | 높음8.8 | A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
| 18/01/2024 |
| CVE-2023-43824 | 높음7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43823 | 높음7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43822 | 높음7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |
| CVE-2023-43821 | 높음7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |
| CVE-2023-43820 | 높음7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43819 | 높음7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMacroLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |