CVE-2024-38816 vulnerabilities

Vulnerabilities for packages: kayenta-fips, thingsboard, kayenta...

CVE-2024-38816 vulnerabilities

Vulnerabilities for packages: thingsboard...

GHSA-M6FV-JMCG-4JFG vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, argo-workflows, kubeflow-pipelines, thingsboard, sqlpad...

CVE-2024-43799 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, argo-workflows, kubeflow-pipelines, thingsboard, sqlpad...

GHSA-9WV6-86V2-598J vulnerabilities

Vulnerabilities for packages: thingsboard, kubeflow-centraldashboard, argo-workflows, kubeflow-pipelines, sqlpad...

CVE-2024-45296 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, argo-workflows, opensearch-dashboards-fips, opensearch-dashboards, kubeflow-pipelines, thingsboard, sqlpad, arangodb...

CVE-2024-45296 vulnerabilities

Vulnerabilities for packages: thingsboard, kubeflow-centraldashboard, argo-workflows, kubeflow-pipelines, sqlpad...

GHSA-WM9W-RJJ3-J356 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2024-34750 vulnerabilities

Vulnerabilities for packages: thingsboard...

CVE-2024-3270

A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2024-3270

CVE-2024-3270 affects ThingsBoard up to version 3.6.2, involving the AdvancedFeature component. The vulnerability enables improper access control and can be exploited remotely; public exploit information exists. Vendor plans a fix in version 3.7. Remediation noted: upgrade to ThingsBoard 3.7 or l...

CVE-2024-3270 ThingsBoard AdvancedFeature access control

A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2024-3270 ThingsBoard AdvancedFeature access control

A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

CVE-2024-3270 ThingsBoard AdvancedFeature access control

A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

ThingsBoard 访问控制错误漏洞

ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. An access control error vulnerability exists in ThingsBoard 3.6.2 and earlier versions, which stems from an access control error vulnerability in the component...

PT-2024-24786 · Unknown · Thingsboard

Name of the Vulnerable Software and Affected Versions: ThingsBoard versions up to 3.6.2 Description: A problematic issue was found in the AdvancedFeature component, leading to improper access controls. The attack can be initiated remotely. The issue affects unknown code and may be exploited. The...

GHSA-6PGR-J9V4-XFVV ThingsBoard Server-Side Template Injection

ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...

ThingsBoard Server-Side Template Injection

ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...

CVE-2023-45303

ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...

CVE-2023-45303

ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...