https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 01:02:21 +0000 https://cve.radiocsirt.org/vuln/cnvd-2022-27433 cnvd-2022-27433 https://cve.radiocsirt.org/vuln/cnvd-2022-27433 https://cve.radiocsirt.org/vuln/euvd-2026-231047 EUVD-2026-231047 https://cve.radiocsirt.org/vuln/euvd-2026-231047 https://cve.radiocsirt.org/vuln/fkie_cve-2022-0988 <p>Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.</p> <p>Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-0988 https://cve.radiocsirt.org/vuln/ghsa-xjhw-6jx7-jr2f <p>Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.</p> <p>Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.</p> https://cve.radiocsirt.org/vuln/ghsa-xjhw-6jx7-jr2f https://cve.radiocsirt.org/vuln/gsd-2022-0988 gsd-2022-0988 https://cve.radiocsirt.org/vuln/gsd-2022-0988 https://cve.radiocsirt.org/vuln/icsa-21-238-03 <p>The affected product may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm. CVE-2021-33003 has been assigned to this vulnerability. A CVSS v3 base score of 5.5 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The affected product may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges. CVE-2021-32967 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product allows unrestricted file uploads, which may allow an attacker to remotely execute code. CVE-2021-32955 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint. The application does not properly validate the user-controlled value supplied through the parameter keyword before using it as part of an SQL query. A remote, unauthenticated attacker can exploit this issue to execute arbitrary code in the context of NT SERVICE\MSSQLSERVER. CVE-2021-32983 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A Blind SQL injection vul…</p> <p>The affected product may allow an attacker to retrieve passwords in cleartext due to a weak hashing algorithm. CVE-2021-33003 has been assigned to this vulnerability. A CVSS v3 base score of 5.5 has been calculated; the CVSS vector string is (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). The affected product may allow an attacker to add a new administrative user without being authenticated or authorized, which may allow the attacker to log in and use the device with administrative privileges. CVE-2021-32967 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The affected product allows unrestricted file uploads, which may allow an attacker to remotely execute code. CVE-2021-32955 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A Blind SQL injection vulnerability exists in the /DataHandler/Handler_CFG.ashx endpoint. The application does not properly validate the user-controlled value supplied through the parameter keyword before using it as part of an SQL query. A remote, unauthenticated attacker can exploit this issue to execute arbitrary code in the context of NT SERVICE\MSSQLSERVER. CVE-2021-32983 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). A Blind SQL injection vul…</p> https://cve.radiocsirt.org/vuln/icsa-21-238-03