Delta Electronics vulnerabilities
We track 147 vulnerabilities in Delta Electronics products across 23 products. 147 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on October 30, 2026.
Latest Delta Electronics vulnerabilities
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in dlSlog.aspx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegf. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadREGbyID. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in ReadRegIND. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in Handler_TCV.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerChart.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 7.8 High severity
ASDA-Soft: Out-of-bounds Write
ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds write condition.
- 7.1 High severity
ASDA-Soft: Out-of-bounds Read
ASDA-Soft: Version 5.4.1.0 and prior does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetCalcTagList. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in DIAE_loopmapHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system comma
- 7.8 High severity
DIAEnergie: Incorrect Default Permissions
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to an incorrect default permission in the DIAEnergie application, which may allow an attacker to plant new files (such as DLLs) or replace existing executable files.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerExport.ashx/Calendar. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute syst
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetDemandAnalysisData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system com
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerECC.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_tagHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system comm
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_eccoefficientHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute s
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerPageP_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerPage_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system comm
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in GetLatestDemandNode. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in GetQueryData. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in DIAE_dmdsetHandler.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system c
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerCommon.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system comman
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability exists in HandlerTag_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system commands.
- 7.5 High severity
DIAEnergie: Improper Limitation of a Pathname to a Restricted Directory
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow an attacker to write arbitrary files to locations on the file system.
- 9.8 Critical severity
DIAEnergie: Improper Neutralization of Special Elements used in an SQL Command
Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) has a blind SQL injection vulnerability that exists in HandlerDialog_KID.ashx. This allows an attacker to inject arbitrary SQL queries, retrieve and modify database contents, and execute system co
- 7.5 High severity
DIAEnergie: Cleartext Transmission of Sensitive Information
Delta Electronics DIAEnergie (Version 1.7.5 and prior) is vulnerable to cleartext transmission as the web application runs by default on HTTP. This could allow an attacker to remotely read transmitted information between the client and product.
- 7.8 High severity
Delta Electronics DOPSoft 2 Improper Input Validation Exploited
Delta Electronic DOPSoft 2 (Version 2.00.07 and prior) lacks proper validation of user-supplied data when parsing specific project files. This could result in multiple out-of-bounds write instances. An attacker could leverage this vulnerability to execute code