3 matches found
CVE-2026-2250
The /dbviewer/ web endpoint in METIS WIC devices is exposed without authentication. A remote attacker can access and export the internal telemetry SQLite database containing sensitive operational data. Additionally, the application is configured with debug mode enabled, causing malformed requests...
CVE-2024-4576: Improper Limitation of a Pathname to a Restricted Directory
The component listed above contains a vulnerability that allows an attacker to traverse directories and access sensitive files, leading to unauthorized disclosure of system configuration and potentially sensitive information...
TIBCO Software EBX Security Vulnerability
TIBCO Software EBX is a software from TIBCO Software, Inc. that supports integration to manage enterprise data assets. A security vulnerability exists in TIBCO Software EBX versions 5.9.25 and earlier and 6.1.3HF2 and earlier, which stems from a directory traversal issue that allows an attacker t...