375 matches found
CVE-2024-38816 vulnerabilities
Vulnerabilities for packages: thingsboard...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: thingsboard, sqlpad, argo-workflows, kubeflow-centraldashboard, kubeflow-pipelines...
CVE-2024-43799 vulnerabilities
Vulnerabilities for packages: thingsboard, sqlpad, argo-workflows, kubeflow-centraldashboard, kubeflow-pipelines...
GHSA-9WV6-86V2-598J vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-pipelines, sqlpad, thingsboard, argo-workflows...
CVE-2024-45296 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, kubeflow-pipelines, sqlpad, thingsboard, argo-workflows...
CVE-2024-45296 vulnerabilities
Vulnerabilities for packages: thingsboard, grafana, vitess, grafana-11.0, argo-workflows, sqlpad, kibana, opensearch-dashboards, kubeflow-centraldashboard, opensearch-dashboards-fips, kubeflow-pipelines, grafana-fips, arangodb...
GHSA-WM9W-RJJ3-J356 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2024-34750 vulnerabilities
Vulnerabilities for packages: thingsboard...
CVE-2024-3270
A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2024-3270
CVE-2024-3270 affects ThingsBoard up to version 3.6.2, involving the AdvancedFeature component. The vulnerability enables improper access control and can be exploited remotely; public exploit information exists. Vendor plans a fix in version 3.7. Remediation noted: upgrade to ThingsBoard 3.7 or l...
CVE-2024-3270 ThingsBoard AdvancedFeature access control
A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2024-3270 ThingsBoard AdvancedFeature access control
A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
CVE-2024-3270 ThingsBoard AdvancedFeature access control
A vulnerability classified as problematic was found in ThingsBoard up to 3.6.2. This vulnerability affects unknown code of the component AdvancedFeature. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...
PT-2024-24786 · Unknown · Thingsboard
Name of the Vulnerable Software and Affected Versions: ThingsBoard versions up to 3.6.2 Description: A problematic issue was found in the AdvancedFeature component, leading to improper access controls. The attack can be initiated remotely. The issue affects unknown code and may be exploited. The...
ThingsBoard 访问控制错误漏洞
ThingsBoard is a Java-based platform for IOT devices for monitoring, management, and data collection by the ThingsBoard team. An access control error vulnerability exists in ThingsBoard 3.6.2 and earlier versions, which stems from an access control error vulnerability in the component...
GHSA-6PGR-J9V4-XFVV ThingsBoard Server-Side Template Injection
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...
ThingsBoard Server-Side Template Injection
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...
CVE-2023-45303
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...
CVE-2023-45303
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...
Sql injection
ThingsBoard before 3.5 allows Server-Side Template Injection if users are allowed to modify an email template, because Apache FreeMarker supports freemarker.template.utility.Execute for content sent to the /api/admin/settings endpoint...