CVE-2021-42750
A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to inject arbitrary JavaScript within […]
İçeriği inceleyinALLSAFE / Güncel Güvenlik AçıklarıGelişmeleri izleyin.
Gelişmeleri izleyin.
Riskleri önceliklendirin.
NIST NVD, USOM / Siber Güvenlik Başkanlığı ve Exploit-DB kaynaklarından güvenlik bildirimleri. Etkilenen ürün ve sürümleri özgün kaynakta doğrulayın.
Kayıtlar kaynakların yayın tarihleri ve özgün içerikleriyle sunulur. Bir kaydın bulunması, kurumunuzun etkilendiğini tek başına göstermez. Sürüm ve yapılandırmayı kontrol ederek üreticinin güncel önerilerini değerlendirin.
CVE-2021-42751
A cross-site scripting (XSS) vulnerability in Rule Engine in ThingsBoard 3.3.1 allows remote attackers (with administrative access) to inject arbitrary JavaScript within […]
İçeriği inceleyinCVE-2022-20312
In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead […]
İçeriği inceleyinCVE-2022-20313
In Bluetooth, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation […]
İçeriği inceleyinCVE-2022-20314 (android)
In KeyChain, there is a possible spoof keychain chooser activity request due to improper input validation. This could lead to local escalation […]
İçeriği inceleyinCVE-2022-20315 (android)
In ActivityManager, there is a possible disclosure of installed packages due to a missing permission check. This could lead to local information […]
İçeriği inceleyinCVE-2022-20316 (android)
In ContentResolver, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information […]
İçeriği inceleyinCVE-2022-20317
In SystemUI, there is a possible way to unexpectedly enable the external speaker due to a logic error in the code. This […]
İçeriği inceleyinCVE-2022-20318
In PackageInstaller, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information […]
İçeriği inceleyinCVE-2022-20319
In DreamServices, there is a possible way to launch arbitrary protected activities due to a confused deputy. This could lead to local […]
İçeriği inceleyinCVE-2022-20320
In ActivityManager, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information […]
İçeriği inceleyinCVE-2022-20321
In Settings, there is a possible way for an application without permissions to read content of WiFi QR codes due to a […]
İçeriği inceleyin