CISA: Extreme Weather Impacts

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Emerging Risks: Extreme Weather Trends and Impacts

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Weather Hazard Preparedness

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

Top Tips for Weather API Integration and Data Utilization

Integrate weather APIs to enhance your app with real-time data, forecasts, and personalized insights. Improve user experience while…...

CVE-2024-12993 Location information exposure in Infinix Weather app

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We...

CVE-2024-12993

The CVE-2024-12993 entry describes a vulnerability in Infinix devices stemming from a pre-loaded app com.rlk.weathers that exposes an unsecured content provider. An attacker can communicate with this provider to reveal the user’s location without any privileges (local attack; no user interaction ...

CVE-2024-12993 Location information exposure in Infinix Weather app

Infinix devices contain a pre-loaded "com.rlk.weathers" application, that exposes an unsecured content provider. An attacker can communicate with the provider and reveal the user’s location without any privileges. After multiple attempts to contact the vendor we did not receive any answer. We...

Transsion Holdings Infinix Mobile devices 安全漏洞

Transsion Holdings Infinix Mobile devices are a range of mobile devices from Transsion Holdings, a Chinese company. A security vulnerability exists in the Transsion Holdings Infinix Mobile devices, which stems from the pre-installed com.rlk.weathers application exposing an unprotected content...

CVE-2021-26279

Some parameters of the weather module are improperly stored, leaking some sensitive information...

CVE-2021-26279 Information disclosure vulnerability in Weather module

Some parameters of the weather module are improperly stored, leaking some sensitive information...

CVE-2021-26279

CVE-2021-26279 affects vivo Weather module; improper storage of some weather parameters_leaks_sensitive_info. CVSSv3.1: 5.9 MEDIUM (LOCAL, LOW privileges, USER INTERACTION required, Confidentiality High). Affected component: Weather module parameters; root cause: improper storage of data. Impact:...

CVE-2021-26279 Information disclosure vulnerability in Weather module

Some parameters of the weather module are improperly stored, leaking some sensitive information...

PT-2024-10899 · Unknown · Weather Module

Name of the Vulnerable Software and Affected Versions: Weather module affected versions not specified Description: The issue concerns the improper storage of some parameters within the weather module, leading to the leakage of sensitive information. Recommendations: At the moment, there is no...

CVE-2021-26279: Exposure of Sensitive Information to an Unauthorized Actor

Some parameters of the weather module are improperly stored, leaking some sensitive information...

vivo Weather modeule 安全漏洞

vivo Weather modeule is a mobile weather service program from the Chinese company Vivo. A security vulnerability exists in vivo Weather modeule, which stems from improper storage of some parameters in the weather module, leaking some sensitive information...

CVE-2024-52472

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weather Atlas Weather Atlas Widget weather-atlas allows Reflected XSS.This issue affects Weather Atlas Widget: from n/a through = 3.0.3...

CVE-2024-52472 WordPress Weather Atlas Widget plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Weather Atlas Weather Atlas Widget weather-atlas allows Reflected XSS.This issue affects Weather Atlas Widget: from n/a through = 3.0.3...

CVE-2024-52472 WordPress Weather Atlas Widget plugin <= 3.0.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Weather Atlas Weather Atlas Widget allows Reflected XSS.This issue affects Weather Atlas Widget: from n/a through 3.0.1...

CVE-2024-52472

CVE-2024-52472 corresponds to a Reflected XSS in Weather Atlas Widget (WordPress plugin) up to version 3.0.1. The issue is rooted in Improper Neutralization of Input During Web Page Generation. The vulnerability is documented with a CVSS v3.1 base score of 7.1 (HIGH) and unauthenticated access. T...

PT-2024-35312

Name of the Vulnerable Software and Affected Versions Weather Atlas Widget versions n/a through 3.0.1 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS in the Weather Atlas Widget...