Skip to content
OpenAdvisories

Vendor

Deltaww

29 known vulnerabilities.

Deltaww at a glance

Last 12 months
29
Critical · all time
9
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 5 10 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 3 vulnerabilities, 1 critical Mar April 2026: 5 vulnerabilities, 4 critical May 2026: 0 vulnerabilities June 2026: 3 vulnerabilities, 2 critical Jun July 2026: 5 vulnerabilities August 2026: 4 vulnerabilities September 2026: 6 vulnerabilities, 2 critical Sep October 2026: 2 vulnerabilities November 2026: 1 vulnerability
Show as table
MonthVulnerabilitiesCritical
Nov 202610
Oct 202620
Sep 202662
Aug 202640
Jul 202650
Jun 202632
May 202600
Apr 202654
Mar 202631
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

29 results · Feed

  • High 8.8

    DIAEnergie - SQL Injection Vulnerability

    Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Deltaww DIAEnergie allows SQL Injection. This issue affects DIAEnergie: before 1.11.01.032.

  • High 7.0

    ISPSoft Out-of-Bounds Read Vulnerability

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

  • High 7.0

    ISPSoft Out-of-Bounds Read Vulnerability

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of Delta ISPSoft.

  • Medium 6.5

    Improper Access Control in DIAEnergie

    Improper Access Control in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

  • Critical 9.1

    Path Traversal in DIAEnergie

    Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

  • Medium 4.3

    Authorization Bypass Through User-Controlled Key in DIAEnergie

    Authorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

  • High 8.8

    SQL Injection in DIAEnergie

    SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

  • High 8.8

    SQL Injection in DIAEnergie

    SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.

  • Critical 9.8

    Authentication Bypass in DIAEnergie

    Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.

  • High 8.8

    DIAEnergie - SQL Injection

    SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

  • High 8.8

    DIAEnergie - SQL Injection

    SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

  • High 8.8

    DIAEnergie - SQL Injection

    SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

  • High 8.8

    DIAEnergie - SQL Injection

    SQL Injection in Delta DIAEnergie v1.11.00.002 allows attacker to remote code execution.

  • High 8.7

    DVP80ES3 Improperly Implemented Security Check for Standard vulnerability

    DVP80ES3 with Improperly Implemented Security Check for Standard vulnerability.

  • High 7.5

    DVP80ES3 Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability

    DVP80ES3 with Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability.

  • High 7.5

    DVP80ES3 Improper Resource Shutdown or Release Vulnerability

    DVP80ES3 with  Improper Resource Shutdown or Release vulnerability.

  • High 7.5

    DVP80ES300T - Improper Validation of Array Index Vulnerability

    DVP80ES300T with Improper Validation of Array Index Vulnerability

  • High 7.4

    AS228T - Authentication Bypass Vulnerability

    AS228T with Authentication Bypass Vulnerability

  • High 8.4

    DTMSoft - Deserialization of Untrusted Data Vulnerability

    The affected product is vulnerable to a deserialization of untrusted data, which may allow an attacker to execute arbitrary code.

  • Critical 9.3

    DVP-12SE Missing Authentication and Unauthorized Write access Vulnerability

    Delta Electronics DVP12SE PLC exposes a Modbus TCP service over a specified port without authentication or access control, permitting unauthenticated interaction with security-sensitive PLC functions.

  • Critical 9.3

    DVP-12SE Exposure of Sensitive Information Vulnerability

    Delta Electronics DVP12SE PLCs are susceptible to a resource allocation vulnerability without limits or throttling (CWE-770) within their Modbus TCP service.

  • Critical 9.8

    No checking of the length of the buffer with the directory name in AS320T

    Delta Electronics AS320T has no checking of the length of the buffer with the directory name vulnerability.

  • Critical 9.8

    Denial of service via the undocumented subfunction in AS320T

    Delta Electronics AS320T has denial of service via the undocumented subfunction vulnerability.

  • Critical 9.8

    No checking of the length of the buffer with the file name in AS320T

    Delta Electronics AS320T has No checking of the length of the buffer with the file name vulnerability.

  • Critical 9.8

    Incorrect calculation of buffer size on the stack in AS320T

    Delta Electronics AS320T has incorrect calculation of the buffer size on the stack in the GET/PUT request handler of the web service.

  • High 7.8

    ASDA-Soft Stack-based Buffer Overflow Vulnerability

    ASDA-Soft Stack-based Buffer Overflow Vulnerability

  • High 7.5

    Buffer Over-read DoS Vulnerability in COMMGR2

    Delta Electronics COMMGR2 has Buffer Over-read DoS vulnerability.

  • Critical 9.8

    Stack-based Buffer Overflow Vulnerability in COMMGR2

    Delta Electronics COMMGR2 has Stack-based Buffer Overflow vulnerability.

  • High 7.8

    File Parsing Out-Of-Bounds Write in CNCSoft-G2

    Delta Electronics CNCSoft-G2 lacks proper validation of the user-supplied file. If a user opens a malicious file, an attacker can leverage this vulnerability to execute code in the context of the current process.