CVE-2023-3140 KNIME Hub Web Application is vulnerable to clickjacking

Missing HTTP headers X-Frame-Options, Content-Security-Policy in KNIME Business Hub before 1.4.0 has left users vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a user into clicking on an actionable item, such as a...

CVE-2023-3140 KNIME Hub Web Application is vulnerable to clickjacking

Missing HTTP headers X-Frame-Options, Content-Security-Policy in KNIME Business Hub before 1.4.0 has left users vulnerable to click jacking. Clickjacking is an attack that occurs when an attacker uses a transparent iframe in a window to trick a user into clicking on an actionable item, such as a...

CVE-2023-2541

CVE-2023-2541 affects the KNIME Business Hub Web Frontend prior to 1.4.0. The issue allows an unauthenticated remote attacker to access internal application details such as version numbers, host names, and IP addresses. No personal information or application data is exposed. Root cause and exact ...

KNIME Business Hub 安全漏洞

KNIME Business Hub is KNIME's enterprise software for data science automation, deployment modeling, team collaboration and management workflows. A security vulnerability exists in KNIME Business Hub versions prior to 1.4.0. An attacker exploiting this vulnerability could access internal informati...

KNIME Business Hub 安全漏洞

KNIME Business Hub is KNIME's enterprise software for data science automation, deployment modeling, team collaboration and management workflows. A security vulnerability exists in KNIME Business Hub versions prior to 1.4.0 that stems from a missing HTTP header. An attacker exploited the...

PT-2023-20052 · Knime · Knime Business Hub

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions prior to 1.4.0 Description: The issue allows an unauthenticated remote attacker to access internal information about the application, such as versions, host names, or IP addresses. No personal information or...

PT-2023-23297 · Knime · Knime Business Hub

Name of the Vulnerable Software and Affected Versions: KNIME Business Hub versions prior to 1.4.0 Description: The issue is related to missing HTTP headers, specifically X-Frame-Options and Content-Security-Policy, in KNIME Business Hub. This omission leaves users vulnerable to clickjacking...

CVE-2023-32321

CKAN (open-source data management system) is affected by CVE-2023-32321 with multiple flaws in older CKAN releases up to 2.9.9/2.10.1. The issues include: (1) arbitrary file writes in resource_create and package_update via ResourceUploader, potentially reachable through package_create/revise/patc...

Design/Logic Flaw

In Snap One OvrC Pro versions prior to 7.2, when logged into the superuser account, a new functionality appears that could allow users to execute arbitrary commands on the hub device...

CVE-2023-28649

The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attacker could impersonate a hub and send device requests to claim already claimed devices. The OvrC cloud platform receives the requests but do...

CVE-2023-28649

CVE-2023-28649 affects Snap One OvrC cloud platform hubs (OvrC Pro/Connect). A input-validation flaw lets an attacker impersonate a hub to send device-claim requests and bypass checks for devices already managed by another user, enabling potential unauthorized access and, per advisory context, po...

CVE-2023-28649

The Hub in the Snap One OvrC cloud platform is a device used to centralize and manage nested devices connected to it. A vulnerability exists in which an attacker could impersonate a hub and send device requests to claim already claimed devices. The OvrC cloud platform receives the requests but do...

Cross site scripting

Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network VPN hub feature for cross-device communication that uses OpenVPN. It connects new devices in a manner that allows the new device to communicate with all Teltonika devices connected to the VPN. The...

PT-2023-23741 · Teltonika · Teltonika'S Remote Management System

Name of the Vulnerable Software and Affected Versions: Teltonika’s Remote Management System versions prior to 4.10.0 Description: The issue concerns the virtual private network VPN hub feature in Teltonika’s Remote Management System, which utilizes OpenVPN for cross-device communication. This...

PT-2023-21873 · Ovrc · Ovrc

Name of the Vulnerable Software and Affected Versions: OvrC cloud platform affected versions not specified Description: A vulnerability exists in the OvrC cloud platform where an attacker could impersonate a hub and send device requests to claim already claimed devices. The platform does not...

Snap One OvrC Pro 安全漏洞

Snap One OvrC is a free cloud-based remote management and monitoring platform from Snap One USA. A security vulnerability exists in Snap One OvrC Pro prior to version 7.3, which stems from a vulnerability that could allow a user to execute arbitrary commands on a hub device when logged in as a...

Snap One OvrC Cloud 输入验证错误漏洞

Snap One OvrC is a free cloud-based remote management and monitoring platform from Snap One USA. Snap One OvrC Cloud suffers from an input validation error vulnerability where an attacker could impersonate a hub and send a device request to declare a declared device...

SUSE: Security Advisory (SUSE-SU-2023:2179-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Routing Hub sub-component of the Oracle Banking Virtual Account Management component in the banking analytics system of the Oracle Financial Services Applications allows a perpetrator to gain access to read, modify, add, or delete data.

The vulnerability of the Routing Hub subcomponent of the Oracle Banking Virtual Account Management component in the banking analytics system of the Oracle Financial Services Applications is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to...

The Veeam KB Resource Hub

Top 10 Most Popular KBs for Q1 2026 1. KB1832: How to Collect Logs for Veeam Backup & Replication 2. KB1999: Antivirus Exclusions for Veeam Backup & Replication 3. KB4687: Unable to Interact with Some Hypervisors and Cloud Platforms 4. KB1471: How to Manually Back Up Veeam Configuration Databases...