İçeriğe atla
Noroxi

home-assistant kayıtları

home-assistant üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
2
Düzeltme kaydı olan
%68,4
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 19
  3. 21
  4. 22
  5. 23
  6. 25
  7. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2023-27482
    62Bu hafta

    homeassistant is an open source home automation tool.

    KritikCVSS 10,0Kavram kanıtıEPSS %72

    home-assistant · home-assistant8 Mar 2023

  • CVE-2023-41897
    38İzleyin

    Lack of XFO header allows clickjacking in Home Assistant Core

    KritikCVSS 9,6İstismar yokEPSS %1

    home-assistant · home-assistant19 Eki 2023

  • CVE-2023-41895
    38İzleyin

    Cross-site Scripting via auth_callback login in Home Assistant Core

    KritikCVSS 9,6İstismar yokEPSS %0

    home-assistant · home-assistant19 Eki 2023

  • CVE-2023-41896
    36İzleyin

    Fake websocket server installation permits full takeover in Home Assistant Core

    KritikCVSS 9,0İstismar yokEPSS %0

    home-assistant · home-assistant19 Eki 2023

  • CVE-2023-44385
    35İzleyin

    Client-Side Request Forgery in Home Assistant iOS/macOS native Apps

    YüksekCVSS 8,8İstismar yokEPSS %0

    home-assistant · home assistant companion19 Eki 2023

  • CVE-2020-36517
    31İzleyin

    An information leak in Nabu Casa Home Assistant Operating System and Home Assistant Supervised 2022.03 allows a DNS operator to gain knowled

    YüksekCVSS 7,5İstismar yokEPSS %2

    home-assistant · home-assistant10 Mar 2022

  • CVE-2018-21019
    31İzleyin

    Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's

    YüksekCVSS 7,5İstismar yokEPSS %1

    home-assistant · home-assistant23 Eyl 2019

  • CVE-2023-41898
    31İzleyin

    Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Android

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    home-assistant · home assistant companion19 Eki 2023

  • CVE-2026-54317
    30İzleyin

    Home Assistant: Konnected alarm-panel switch state and zone topology disclosed to unauthenticated actors on the LAN

    YüksekCVSS 7,6İstismar yokEPSS %0

    home-assistant · home-assistant23 Haz 2026

  • CVE-2026-33044
    29İzleyin

    Home Assistant has stored XSS in Map-card through malicious device name

    YüksekCVSS 7,3İstismar yokEPSS %0

    home-assistant · home-assistant27 Mar 2026

  • CVE-2026-33045
    29İzleyin

    Home Assistant has stored XSS in history-graphs

    YüksekCVSS 7,3İstismar yokEPSS %0

    home-assistant · home-assistant27 Mar 2026

  • CVE-2023-41899
    28İzleyin

    Partial Server-Side Request Forgery in Home Assistant Core

    YüksekCVSS 7,2İstismar yokEPSS %0

    home-assistant · home-assistant19 Eki 2023

  • CVE-2026-54318
    28İzleyin

    Home Assistant: Exported BroadcastReceiver allows local apps to spoof device location

    YüksekCVSS 7,1İstismar yokEPSS %0

    home-assistant · home assistant companion23 Haz 2026

  • CVE-2017-16782
    24İzleyin

    In Home Assistant before 0.57, it is possible to inject JavaScript code into a persistent notification via crafted Markdown text, aka XSS.

    OrtaCVSS 6,1İstismar yokEPSS %0

    home-assistant · home-assistant10 Kas 2017

  • CVE-2021-3152
    22İzleyin

    Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrat

    OrtaCVSS 5,3Kavram kanıtıEPSS %2

    home-assistant · home-assistant26 Oca 2021

  • CVE-2023-41894
    21İzleyin

    Local-only webhooks externally accessible via SniTun in Home Assistant Core

    OrtaCVSS 5,3İstismar yokEPSS %0

    home-assistant · home-assistant19 Eki 2023

  • CVE-2023-41893
    21İzleyin

    Account takeover via auth_callback login in Home Assistant Core

    OrtaCVSS 5,4İstismar yokEPSS %0

    home-assistant · home-assistant19 Eki 2023

  • CVE-2023-50715
    17İzleyin

    User accounts disclosed to unauthenticated actors on the LAN

    OrtaCVSS 4,3İstismar yokEPSS %0

    home-assistant · home-assistant14 Ara 2023

  • CVE-2025-65713
    16İzleyin

    Home Assistant Core before v2025.8.0 is vulnerable to Directory Traversal.

    OrtaCVSS 4,0İstismar yokEPSS %0

    home-assistant · home-assistant23 Ara 2025