CVE-2022-25815: Incorrect Default Permissions

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent...

PT-2022-17540

Name of the Vulnerable Software and Affected Versions Weather application versions prior to SMR Mar-2022 Release 1 Description The issue allows local attackers to perform unauthorized actions without permission by hijacking the PendingIntent. Recommendations For versions prior to SMR Mar-2022...

CVE-2021-24864

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the postid parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue...

CVE-2021-24864

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the postid parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue...

CVE-2021-24864

The WP Cloudy, weather plugin WordPress plugin before 4.4.9 does not escape the postid parameter before using it in a SQL statement in the admin dashboard, leading to a SQL Injection issue...

CVE-2021-24864

CVE-2021-24864 affects WP Cloudy (WordPress plugin) prior to 4.4.9. The issue is a SQL injection in the admin dashboard caused by not escaping the post_id parameter before using it in an SQL statement. Impact: potential unauthorized access/modification via the admin interface. Affected: WP Cloudy...

WordPress TK Event Weather plugin <= 1.6.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress TK Event Weather plugin versions = 1.6.6. Solution No patched version available...

WordPress TK Event Weather plugin <= 1.6.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress TK Event Weather plugin versions = 1.6.6. Solution No patched version available...

February 15, 2022—KB5010414 (OS Build 22000.527) Preview

None None...

OpenBMCS 2.4 - Information Disclosure

Exploit Title: OpenBMCS 2.4 - Information Disclosure Exploit Author: LiquidWorm Date: 26/10/2021 OpenBMCS 2.4 Secrets Disclosure Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your...

RTL Nederland Makes Weather Forecasting Fast, Reliable and Sustainable with Help From Akamai

Media giant RTL Nederland offers a weather app that gives users the ability to get a comprehensive overview of the weather in their location at the click of a button. Akamai is delighted that this exciting media brand has chosen us to deliver a rich and engaging web experience for its viewers whi...

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

Information disclosure

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

CVE-2021-3720

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

CVE-2021-3720

The CVE-2021-3720 entry concerns Lenovo Legion Phone Pro (L79031) and Legion Phone2 Pro (L70081) where the Time Weather system widget improperly allows other applications to access device GPS data. The connected documents confirm the vulnerable component is the Time Weather widget; however, no te...

Legion Phone Pro（L79031）和Legion Phone2 Pro（L70081）上时间天气系统小部件 安全漏洞

The Lenovo Legion Phone Pro and Legion Phone2 Pro are both gaming phones from the Chinese company Lenovo. A security vulnerability in the Time Weather System widget on the Legion Phone Pro L79031 and Legion Phone2 Pro L70081 can be exploited by an attacker to access the device's GPS data via othe...

CVE-2021-3720: Incorrect Default Permissions

An information disclosure vulnerability was reported in the Time Weather system widget on Legion Phone Pro L79031 and Legion Phone2 Pro L70081 that could allow other applications to access device GPS data...

PT-2021-21571

Name of the Vulnerable Software and Affected Versions Legion Phone Pro version L79031 Legion Phone2 Pro version L70081 Description An information disclosure issue was reported in the Time Weather system widget that could allow other applications to access device GPS data. Recommendations For Legi...