Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/22 4:17 p.m.•6 views

CVE-2026-115496

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible...

6.9CVSS0.00401EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/22 3:56 p.m.•8 views

CVE-2026-115496

KNIME Business Hub versions prior to 1.18.5 are vulnerable to the disclosure of sensitive information due to overly informative error messages within the catalog functionality . An authenticated remote attacker who knows a specific ID may be able to view associated workflow names . No workaround ...

6.9CVSS5.9AI score0.00401EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 3:56 p.m.•23 views

CVE-2026-115496 Workflow names may be leaked to unauthenticated users in KNIME Business Hub

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible...

6.9CVSS0.00401EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/22 3:56 p.m.•6 views

EUVD-2026-108224

Overly informative error messages in the catalog functionality of KNIME Business Hub prior to version 1.18.5 may allow an authenticated remote attacker to see workflow names if their ID is known. A workaround is not possible...

6.9CVSS6AI score0.00401EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2026/04/24 3:32 p.m.•37 views

GHSA-W7RC-Q6CM-F5GM Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions

The asset dependency graph did not restrict nodes by the viewer's DAG read permissions: a user with read access to at least one DAG could browse the asset graph for any other asset in the deployment and learn the existence and names of DAGs and assets outside their authorized scope. Users are...

4.3CVSS5.9AI score0.00352EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2020/06/29 5:50 a.m.•55 views

CVE-2019-20412

The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types;...

5.3AI score0.01883EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/06/29 12:00 a.m.•8 views

PT-2020-10429

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.9 Atlassian Jira Server and Data Center versions 8.0.0 through 8.4.2 Description The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allo...

5.3CVSS0.01883EPSS
SaveExploits0References5
Rows per page
Query Builder