CVE-2021-38391
Published Aug 30, 2021A Blind SQL injection vulnerability exists in the /DataHandler/AM/AM_Handler.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not proper…
Vendor/product archive
deltaww / diaenergie CVEs
Beta · best-effort82 CVEs tagged to deltaww / diaenergie — 39 Critical, 35 High, 8 Medium, 0 Low, 0 Unrated.
CVE-2021-38390
Published Aug 30, 2021A Blind SQL injection vulnerability exists in the /DataHandler/HandlerEnergyType.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not pr…
CVE-2021-33003
Published Aug 30, 2021Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm.
CVE-2021-32991
Published Aug 30, 2021Delta Electronics DIAEnergie Version 1.7.5 and prior is vulnerable to cross-site request forgery, which may allow an attacker to cause a user to carry out an action unintentionall…
CVE-2021-32983
Published Aug 30, 2021A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint of Delta Electronics DIAEnergie Version 1.7.5 and prior. The application does not properly…
CVE-2021-32967
Published Aug 30, 2021Delta Electronics DIAEnergie Version 1.7.5 and prior may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker…
CVE-2021-32955
Published Aug 30, 2021Delta Electronics DIAEnergie Version 1.7.5 and prior allows unrestricted file uploads, which may allow an attacker to remotely execute code.
Showing 76-82 of 82 CVEsPage 4 of 4