| CVE-2024-25574 | NGHIÊM TRỌNG9.8 |
SQL injection vulnerability exists in GetDIAE_usListParameters.
| 01/04/2024 |
| CVE-2024-28171 | CAO8.1 |
It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.
| 21/03/2024 |
| CVE-2024-28045 | TRUNG BÌNH5.4 |
Improper neutralization of input within the affected product could lead to cross-site scripting.
| 21/03/2024 |
| CVE-2024-28040 | CAO8.8 |
SQL injection vulnerability exists in GetDIAE_astListParameters.
| 21/03/2024 |
| CVE-2024-25567 | CAO8.8 |
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.
| 21/03/2024 |
| CVE-2024-23975 | CAO8.8 |
SQL injection vulnerability exists in GetDIAE_slogListParameters.
| 21/03/2024 |
| CVE-2024-23494 | CAO8.8 |
SQL injection vulnerability exists in GetDIAE_unListParameters.
| 21/03/2024 |
| CVE-2024-28891 | CAO8.8 |
SQL injection vulnerability exists in the script Handler_CFG.ashx.
| 21/03/2024 |
| CVE-2024-28029 | CAO8.8 | Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality. | 21/03/2024 |
| CVE-2024-25937 | CAO8.8 |
SQL injection vulnerability exists in the script DIAE_tagHandler.ashx.
| 21/03/2024 |
| CVE-2024-1941 | CAO7.8 |
Delta Electronics CNCSoft-B versions 1.0.0.4 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.
| 01/03/2024 |
| CVE-2024-1595 | CAO7.8 | Delta Electronics CNCSoft-B DOPSoft prior to v4.0.0.82
insecurely loads libraries, which may allow an attacker to use DLL hijacking and take over the system where the software is installed.
| 29/02/2024 |
| CVE-2023-5131 | CAO8.8 | A heap buffer-overflow exists in Delta Electronics ISPSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
| 18/01/2024 |
| CVE-2023-5130 | CAO8.8 | A buffer overflow vulnerability exists in Delta Electronics WPLSoft. An anonymous attacker can exploit this vulnerability by enticing a user to open a specially crafted DVP file to achieve code execution.
| 18/01/2024 |
| CVE-2023-43824 | CAO7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTitleTextLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43823 | CAO7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wTTitleLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43822 | CAO7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesTimeLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |
| CVE-2023-43821 | CAO7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesActionLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |
| CVE-2023-43820 | CAO7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the wLogTitlesPrevValueLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution. | 18/01/2024 |
| CVE-2023-43819 | CAO7.8 | A stack based buffer overflow exists in Delta Electronics Delta Industrial Automation DOPSoft when parsing the InitialMacroLen field of a DPS file. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to open a specially crafted DPS file to achieve remote code execution.
| 18/01/2024 |