Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (92 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-78312 1 Deltaww 1 Diaenergie 2026-09-24 9.1 Critical
Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
CVE-2026-78313 1 Deltaww 1 Diaenergie 2026-09-24 6.5 Medium
Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
CVE-2026-78311 1 Deltaww 1 Diaenergie 2026-09-24 8.8 High
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
CVE-2026-78309 1 Deltaww 1 Diaenergie 2026-09-24 8.8 High
SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
CVE-2026-78308 1 Deltaww 1 Diaenergie 2026-09-24 9.8 Critical
Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.
CVE-2026-78310 1 Deltaww 1 Diaenergie 2026-09-24 4.3 Medium
Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
CVE-2026-78317 1 Deltaww 1 Diaenergie 2026-08-24 8.8 High
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78316 1 Deltaww 1 Diaenergie 2026-08-24 8.8 High
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78315 1 Deltaww 1 Diaenergie 2026-08-24 8.8 High
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2026-78314 1 Deltaww 1 Diaenergie 2026-08-24 8.8 High
SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.
CVE-2022-3214 1 Deltaww 1 Diaenergie 2026-02-25 9.8 Critical
Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to  1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing remote code execution.
CVE-2024-23494 1 Deltaww 1 Diaenergie 2025-11-05 8.8 High
SQL injection vulnerability exists in GetDIAE_unListParameters.
CVE-2024-28891 1 Deltaww 1 Diaenergie 2025-11-05 8.8 High
SQL injection vulnerability exists in the script Handler_CFG.ashx.
CVE-2024-23975 1 Deltaww 1 Diaenergie 2025-11-05 8.8 High
SQL injection vulnerability exists in GetDIAE_slogListParameters.
CVE-2024-25567 1 Deltaww 1 Diaenergie 2025-11-05 8.1 High
Path traversal attack is possible and write outside of the intended directory and may access sensitive information. If a file name is specified that already exists on the file system, then the original file will be overwritten.
CVE-2024-28040 1 Deltaww 1 Diaenergie 2025-11-05 8.8 High
SQL injection vulnerability exists in GetDIAE_astListParameters.
CVE-2024-28045 1 Deltaww 1 Diaenergie 2025-11-05 4.6 Medium
Improper neutralization of input within the affected product could lead to cross-site scripting.
CVE-2024-28171 1 Deltaww 1 Diaenergie 2025-11-05 8.1 High
It is possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten.
CVE-2025-57703 2 Delta Electronics, Deltaww 2 Diaview, Diaenergie 2025-08-21 6.1 Medium
DIAEnergie - Reflected Cross-site Scripting
CVE-2025-57702 2 Delta Electronics, Deltaww 2 Diaview, Diaenergie 2025-08-21 6.1 Medium
DIAEnergie - Reflected Cross-site Scripting