417 matches found
thingsboard
Plataforma IoT de código abierto para recopilación, procesamiento, visualización y gestión de dispositivos. 💡 Comenzar • 🌐 Sitio web • 📚 Documentación • 📔 Blog • 🔗 LinkedIn 🚀 Opciones de instalación Instala ThingsBoard en las instalaciones o usa ThingsBoard Cloud. 💡 Primeros pasos con ThingsBoard...
ThingsBoard-IoT-Platform-CVE-2024-55466
ThingsBoard Privilege Escalation Using Stored XSS While tinkering with IoT technology, I found vulnerability in the Thingsboard Application that allowed avenues for privilege escalation. Thingsboard is an open-source application that allows device management, data collection, processing and...
thingsboard-ssrf-cve-2025-34282
CVE-2025-34282 — ThingsBoard SSRF via SVG Image Upload Overview Server-Side Request Forgery SSRF vulnerability in ThingsBoard IoT Platform versions before 4.2.1. An attacker with Tenant Admin access can upload a crafted SVG file containing an internal URL reference via the Image Upload Gallery...
CVE-2026-65905 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-68525 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-GCX9-497G-6CP6 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-H3X4-894J-XPX5 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2026-65182 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-9XV2-5V5Q-P794 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
EUVD-2025-210791
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
CVE-2025-70340
CVE-2025-70340 is a Broken Access Control vulnerability in ThingsBoard Professional Edition (PE) 4.21 and below , specifically within the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments , enabl...
CVE-2025-70340
A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...
GHSA-2QJ4-MMR9-4V2F vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, pinot-fips, trino, management-api-for-apache-cassandra-4.0, thingsboard, pinot, celeborn, apache-hop-fips, tinkerpop, tez, hadoop-fips, seata, management-api-for-apache-cassandra-4.1...
CVE-2026-59902 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, pinot-fips, trino, management-api-for-apache-cassandra-4.0, thingsboard, pinot, celeborn, apache-hop-fips, tinkerpop, tez, hadoop-fips, seata, management-api-for-apache-cassandra-4.1...
CVE-2026-73569 vulnerabilities
Vulnerabilities for packages: langfuse, kibana, thingsboard-fips, langfuse-fips, jitsucom-jitsu, tileserver-gl, tileserver-gl-fips...
CVE-2026-73507 vulnerabilities
Vulnerabilities for packages: management-api-for-apache-cassandra-5.0, thingsboard, apache-hop-fips, tinkerpop, tez, apache-hop, hadoop-fips, seata...
CVE-2026-73507 vulnerabilities
Vulnerabilities for packages: tez, management-api-for-apache-cassandra-5.0, thingsboard...
CVE-2026-73508 vulnerabilities
Vulnerabilities for packages: zipkin, apache-pulsar, tez, strimzi-kafka-operator, apicurio-registry, spark, druid, apache-nifi, management-api-for-apache-cassandra-5.0, thingsboard, opensearch, keycloak, akhq, celeborn...