CVE-2018-1000045

NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...

CVE-2018-1000048

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

CVE-2018-1000048

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

Design/Logic Flaw

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

CVE-2018-1000045

NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...

song.phys.au.dk XSS vulnerability

Open Bug Bounty ID: OBB-550696 Description| Value ---|--- Affected Website:| song.phys.au.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

weather-wherever.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-487291 Description| Value ---|--- Affected Website:| weather-wherever.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

weather-finder.com XSS vulnerability

Open Bug Bounty ID: OBB-447415 Description| Value ---|--- Affected Website:| weather-finder.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

CVE-2017-9245

CVE-2017-9245 affects the Google News and Weather app for Android up to version 3.3.1. The root cause is failure to use SSL for server calls, allowing remote attackers to sniff network traffic and read OAuth tokens. Impact is confidentiality (OAuth tokens exposed) with a CVSSv3 base score of 7.5 ...

CVE-2017-9245

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL...

Directory Traversal

Overview Affected versions of scott-blanch-weather-app resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the...

southafricanweather.co.za XSS vulnerability

Vulnerable URL: http://www.southafricanweather.co.za/aat/default.asp?Detailedweather=1"...

weather.unisys.com XSS vulnerability

Open Bug Bounty ID: OBB-256698 Description| Value ---|--- Affected Website:| weather.unisys.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rizabell.com XSS vulnerability

Open Bug Bounty ID: OBB-244127 Description| Value ---|--- Affected Website:| rizabell.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Weather Street Style - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Weather Street Style published at the 'play' market has multiple vulnerabilities...

local.cndy.org XSS vulnerability

Vulnerable URL: http://local.cndy.org/weather/api.php?callback=prompt/OPENBUGBOUNTY/...

alerts.weather.gov XSS vulnerability

Vulnerable URL: https://alerts.weather.gov/cap/wwaatmget.php?x=OHZ001'%22%26%25prompt/OPENBUGBOUNTY/...

courant.com XSS vulnerability

Vulnerable URL: http://www.courant.com/weather/?regionalZipCode=-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19383 VIP website status:| Yes Check courant.com SSL connection:|...

twcweather.com Open Redirect vulnerability

Vulnerable URL: http://twcweather.com/twc40/c2.php?TWC/69983114/27984/H/N/V/https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Yahoo Weather - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Weather published at the 'play' market has multiple vulnerabilities...