CVE-2020-9406

IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service...

CVE-2024-52472

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weather Atlas Weather Atlas Widget weather-atlas allows Reflected XSS.This issue affects Weather Atlas Widget: from n/a through = 3.0.3...

CVE-2024-45061

A cross-site scripting xss vulnerability exists in the weather map editor functionality of Observium CE 24.4.13528. A specially crafted HTTP request can lead to a arbitrary javascript code execution. An authenticated user would need to click a malicious link provided by the attacker...

CVE-2024-45061

Observation: CVE-2024-45061 is a cross-site scripting (XSS) vulnerability in Observium CE 24.4.13528’s weather map editor. The flaw is a reflected XSS in the weather map editor, triggered by an authenticated user clicking a malicious link; an attacker can inject arbitrary JavaScript into the Obse...

Observium 跨站脚本漏洞

Observium is a free server monitoring platform from Observium UK. Written in PHP, the platform is an auto-discovery SNMP-based network monitoring platform that supports a very wide range of network hardware and operating systems, including Cisco, Windows, Linux, HP, NetApp, and more. A cross-site...

Observium mapname cross-site scripting (XSS) vulnerability

Talos Vulnerability Report TALOS-2024-2092 Observium mapname cross-site scripting XSS vulnerability January 15, 2025 CVE Number CVE-2024-45061 SUMMARY A cross-site scripting xss vulnerability exists in the weather map editor functionality of Observium CE 24.4.13528. A specially crafted HTTP reque...

CISA: Extreme Weather Impacts

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Weather Hazard Preparedness

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Emerging Risks: Extreme Weather Trends and Impacts

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Top Tips for Weather API Integration and Data Utilization

Integrate weather APIs to enhance your app with real-time data, forecasts, and personalized insights. Improve user experience while…...

CVE-2024-12993 Location information exposure in Infinix Weather app

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We...

CVE-2024-12993

The CVE-2024-12993 entry describes a vulnerability in Infinix devices stemming from a pre-loaded app com.rlk.weathers that exposes an unsecured content provider. An attacker can communicate with this provider to reveal the user’s location without any privileges (local attack; no user interaction ...

CVE-2024-12993 Location information exposure in Infinix Weather app

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We...

Transsion Holdings Infinix Mobile devices 安全漏洞

Transsion Holdings Infinix Mobile devices are a range of mobile devices from Transsion Holdings, a Chinese company. A security vulnerability exists in the Transsion Holdings Infinix Mobile devices, which stems from the pre-installed com.rlk.weathers application exposing an unprotected content...

CVE-2021-26279

Some parameters of the weather module are improperly stored, leaking some sensitive information...

CVE-2021-26279 Information disclosure vulnerability in Weather module

Some parameters of the weather module are improperly stored, leaking some sensitive information...

CVE-2021-26279 Information disclosure vulnerability in Weather module

Some parameters of the weather module are improperly stored, leaking some sensitive information...

CVE-2021-26279

CVE-2021-26279 affects vivo Weather module; improper storage of some weather parameters_leaks_sensitive_info. CVSSv3.1: 5.9 MEDIUM (LOCAL, LOW privileges, USER INTERACTION required, Confidentiality High). Affected component: Weather module parameters; root cause: improper storage of data. Impact:...

PT-2024-10899 · Unknown · Weather Module

Name of the Vulnerable Software and Affected Versions: Weather module affected versions not specified Description: The issue concerns the improper storage of some parameters within the weather module, leading to the leakage of sensitive information. Recommendations: At the moment, there is no...

vivo Weather modeule 安全漏洞

vivo Weather modeule is a mobile weather service program from the Chinese company Vivo. A security vulnerability exists in vivo Weather modeule, which stems from improper storage of some parameters in the weather module, leaking some sensitive information...