585 matches found
CVE-2025-9094
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094
CVE-2025-9094 affects ThingsBoard 4.1 in the Add Gateway Handler component, where improper neutralization of special elements in a template engine enables remote exploitation. Publicly disclosed exploit; vendor notes a fix in upcoming release (v4.2) with maintenance/LTS updates starting from 4.0....
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
CVE-2025-9094 ThingsBoard Add Gateway special elements used in a template engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
PT-2025-33619
Name of the Vulnerable Software and Affected Versions: ThingsBoard version 4.1 Description: A vulnerability exists in ThingsBoard that affects unknown code within the Add Gateway Handler component. The issue involves improper neutralization of special elements used in a template engine, allowing...
ThingsBoard 安全漏洞
ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. A security vulnerability exists in ThingsBoard version 4.1, which stems from the Add Gateway Handler component improperly neutralizing special elements of the template...
CVE-2025-9094: Improper Neutralization of Special Elements Used in a Template Engine
A vulnerability was detected in ThingsBoard 4.1. This vulnerability affects unknown code of the component Add Gateway Handler. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be initiated remotely. The exploit has been disclosed to t...
MAL-2025-36813 Malicious code in thingsboard-advanced-attribute-widget (npm)
The package thingsboard-advanced-attribute-widget was found to contain malicious code...
Malicious code in thingsboard-advanced-attribute-widget (npm)
The package thingsboard-advanced-attribute-widget was found to contain malicious code...
CVE-2025-22227 vulnerabilities
Vulnerabilities for packages: druid, flyway, apache-nifi, sonarqube, thingsboard, opensearch...
GHSA-4Q2V-9P7V-3V22 vulnerabilities
Vulnerabilities for packages: druid, flyway, apache-nifi, sonarqube, thingsboard, opensearch...
CVE-2025-22227 vulnerabilities
Vulnerabilities for packages: apache-nifi, opensearch, conductor-fips, druid, flyway, sonarqube, commercial-elasticsearch, elasticsearch, elasticsearch-fips, thingsboard, conductor, camunda-zeebe...
GHSA-4Q2V-9P7V-3V22 vulnerabilities
Vulnerabilities for packages: apache-nifi, opensearch, conductor-fips, druid, flyway, sonarqube, commercial-elasticsearch, elasticsearch, elasticsearch-fips, thingsboard, conductor, camunda-zeebe...
CVE-2025-48924 vulnerabilities
Vulnerabilities for packages: apicurio-registry, gradle, apache-nifi, wildfly, sonarqube, sonar-scanner-cli, dependency-track, jenkins, kserve-modelmesh, nextflow, maven-stage0, spark, confluent-kafka, debezium-connector-spanner, cassandra-reaper, apache-nifi-registry, druid,...
GHSA-J288-Q9X7-2F5V vulnerabilities
Vulnerabilities for packages: apicurio-registry, gradle, apache-nifi, wildfly, sonarqube, sonar-scanner-cli, dependency-track, jenkins, kserve-modelmesh, nextflow, maven-stage0, spark, confluent-kafka, debezium-connector-spanner, cassandra-reaper, apache-nifi-registry, druid,...
GHSA-J288-Q9X7-2F5V vulnerabilities
Vulnerabilities for packages: cassandra-reaper, keycloak, wildfly, automq, cassandra, debezium-connector-spanner, jenkins-plugin-manager, liquibase, celeborn, logstash, druid, solr-fips, jenkins, ghidra, flyway, kafka, opensearch, apache-tika, hadoop-client-modules, kserve-modelmesh, gradle,...
GHSA-G93M-8X6H-G5GV vulnerabilities
Vulnerabilities for packages: solr, thingsboard...