DI
Product
DIAEnergie
92
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 41High 32Medium 19Low 0
Watch
Add DIAEnergie to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-78311 | 8.8 | Sep 24 | SQL Injection in DIAEnergie Affected: before 1.11.00.022 |
| CVE-2026-78309 | 8.8 | Sep 24 | SQL Injection in DIAEnergie Affected: before 1.11.00.022 |
| CVE-2026-78317 | 8.8 | Aug 24 | DIAEnergie - SQL Injection Affected: through 1.11.00.002 |
| CVE-2026-78316 | 8.8 | Aug 24 | DIAEnergie - SQL Injection Affected: through 1.11.00.002 |
| CVE-2026-78315 | 8.8 | Aug 24 | DIAEnergie - SQL Injection Affected: through 1.11.00.002 |
| CVE-2026-78314 | 8.8 | Aug 24 | DIAEnergie - SQL Injection Affected: through 1.11.00.002 |
| CVE-2024-42417 | 8.8 | Oct 3 | Delta Electronics DIAEnergie SQL Injection Affected: through 1.10.01.008 |
| CVE-2024-34033 | 8.8 | May 3 | Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the intended directory Affected: 1.10.00.005 |
| CVE-2024-34032 | 8.8 | May 3 | Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the GetDIACloudList endpoint Affected: 1.10.00.005 |
| CVE-2024-34031 | 8.8 | May 3 | Delta Electronics DIAEnergie is vulnerable to an SQL injection vulnerability that exists in the script Handler_CFG.ashx Affected: 1.10.00.005 |
| CVE-2024-28040 | 8.8 | Mar 21 | SQL injection vulnerability exists in GetDIAE_astListParameters Affected: before 1.10.00.005 |
| CVE-2024-25567 | 8.8 | Mar 21 | Path traversal attack is possible and write outside of the intended directory and may access sensitive information Affected: before 1.10.00.005 |
| CVE-2024-23975 | 8.8 | Mar 21 | SQL injection vulnerability exists in GetDIAE_slogListParameters Affected: before 1.10.00.005 |
| CVE-2024-23494 | 8.8 | Mar 21 | SQL injection vulnerability exists in GetDIAE_unListParameters Affected: before 1.10.00.005 |
| CVE-2024-28891 | 8.8 | Mar 21 | SQL injection vulnerability exists in the script Handler_CFG.ashx Affected: before 1.10.00.005 |
| CVE-2024-28029 | 8.8 | Mar 21 | Privileges are not fully verified server-side, which can be abused by a user with limited privileges to bypass authorization and access privileged functionality Affected: before 1.10.00.005 |
| CVE-2024-25937 | 8.8 | Mar 21 | SQL injection vulnerability exists in the script DIAE_tagHandler.ashx Affected: before 1.10.00.005 |
| CVE-2023-0822 | 8.8 | Feb 17 | The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorization and access… Affected: before 1.9.03.001 |
| CVE-2022-43506 | 8.8 | Nov 17 | SQL Injection in HandlerTag_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Affected: before 1.9.02.001 |
| CVE-2022-43457 | 8.8 | Nov 17 | SQL Injection in HandlerPage_KID.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Affected: before 1.9.02.001 |
| CVE-2022-43452 | 8.8 | Nov 17 | SQL Injection in FtyInfoSetting.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Affected: before 1.9.02.001 |
| CVE-2022-43447 | 8.8 | Nov 17 | SQL Injection in AM_EBillAnalysis.aspx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Affected: before 1.9.02.001 |
| CVE-2022-41775 | 8.8 | Nov 17 | SQL Injection in Handler_CFG.ashx in Delta Electronics DIAEnergie versions prior to v1.9.02.001 allows an attacker to inject SQL queries via Network Affected: before 1.9.02.001 |
| CVE-2022-41133 | 8.8 | Oct 27 | Delta Electronics DIAEnergie Affected: before 1.9.01.002 |
| CVE-2022-41773 | 8.8 | Oct 27 | Delta Electronics DIAEnergie Affected: before 1.9.01.002 |
| CVE-2022-40967 | 8.8 | Oct 27 | Delta Electronics DIAEnergie Affected: before 1.9.01.002 |
| CVE-2024-28171 | 8.1 | Mar 21 | It is possible to perform a path traversal attack and write outside of the intended directory Affected: before 1.10.00.005 |
| CVE-2022-1098 | 7.8 | Apr 1 | Delta Electronics DIAEnergie (all versions prior to 1.8.02.004) are vulnerable to a DLL hijacking condition Affected: before 1.8.02.004 |
| CVE-2022-26839 | 7.8 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to… Affected: before 1.8.02.004 |
| CVE-2024-4549 | 7.5 | May 6 | A denial of service vulnerability exists in Delta Electronics DIAEnergie v1.10.1.8610 and prior Affected: before 1.10.01.004 |
| CVE-2022-25347 | 7.5 | Mar 29 | Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the… Affected: before 1.8.02.004 |
| CVE-2022-0988 | 7.5 | Mar 25 | Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP Affected: through 1.7.5 |
Showing 32