417 matches found
thingsboard
Plataforma IoT de código abierto para recopilación, procesamiento, visualización y gestión de dispositivos. 💡 Comenzar • 🌐 Sitio web • 📚 Documentación • 📔 Blog • 🔗 LinkedIn 🚀 Opciones de instalación Instala ThingsBoard en las instalaciones o usa ThingsBoard Cloud. 💡 Primeros pasos con ThingsBoard...
ThingsBoard-IoT-Platform-CVE-2024-55466
Escalada de privilegios en ThingsBoard mediante XSS almacenado Mientras experimentaba con tecnología IoT, encontré una vulnerabilidad en la aplicación Thingsboard que permitía vías para la escalada de privilegios. Thingsboard es una aplicación de código abierto que permite la gestión de...
thingsboard-ssrf-cve-2025-34282
CVE-2025-34282 — ThingsBoard SSRF via SVG Image Upload Overview Server-Side Request Forgery SSRF vulnerability in ThingsBoard IoT Platform versions before 4.2.1. An attacker with Tenant Admin access can upload a crafted SVG file containing an internal URL reference via the Image Upload Gallery...
CVE-2026-68525 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-GCX9-497G-6CP6 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-65905 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-H3X4-894J-XPX5 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-65182 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-9XV2-5V5Q-P794 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
EUVD-2025-210791
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
CVE-2025-70340 is a Broken Access Control vulnerability in ThingsBoard Professional Edition (PE) 4.21 and below , specifically within the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments , enabl...
GHSA-2QJ4-MMR9-4V2F vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, thingsboard, management-api-for-apache-cassandra-5.0, pinot, tinkerpop, hadoop-fips, tez, celeborn, seata, trino, apache-hop-fips, pinot-fips...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, thingsboard, management-api-for-apache-cassandra-5.0, pinot, tinkerpop, hadoop-fips, tez, celeborn, seata, trino, apache-hop-fips, pinot-fips...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: kibana, thingsboard-fips, langfuse, tileserver-gl-fips, jitsucom-jitsu, tileserver-gl, langfuse-fips...
CVE-2026-73507 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, tinkerpop, hadoop-fips, tez, seata, apache-hop-fips, apache-hop...
CVE-2026-73507 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, tez...
CVE-2026-73508 vulnerabilities
Vulnerabilities for packages: thingsboard, spark, apache-pulsar, druid, management-api-for-apache-cassandra-5.0, tez, keycloak, apicurio-registry, opensearch, apache-nifi, celeborn, zipkin, akhq, strimzi-kafka-operator...