CVE-2017-16110

weather.swlyons is a simple web server for weather updates. weather.swlyons is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16110

weather.swlyons is a simple web server for weather updates. weather.swlyons is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16184

scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16110

Weather.swlyons is a simple web server affected by a directory traversal vulnerability. The issue arises when a URL contains ../ sequences, enabling an attacker to access filesystem paths outside the intended directory root. Descriptions across multiple sources (including GHSA advisory, OSV, CNVD...

CVE-2017-16184: Improper Limitation of a Pathname to a Restricted Directory

scott-blanch-weather-app is a sample Node.js app using Express 4. scott-blanch-weather-app is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

PT-2018-6211

Name of the Vulnerable Software and Affected Versions: scott-blanch-weather-app affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to...

onthesnow.com.br XSS vulnerability

Open Bug Bounty ID: OBB-604666 Description| Value ---|--- Affected Website:| onthesnow.com.br Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

onthesnow.com.mx XSS vulnerability

Open Bug Bounty ID: OBB-604668 Description| Value ---|--- Affected Website:| onthesnow.com.mx Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

onthesnow.co.nz XSS vulnerability

Open Bug Bounty ID: OBB-604663 Description| Value ---|--- Affected Website:| onthesnow.co.nz Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

onthesnow.com XSS vulnerability

Open Bug Bounty ID: OBB-604661 Description| Value ---|--- Affected Website:| onthesnow.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

exactet.ca XSS vulnerability

Open Bug Bounty ID: OBB-599233 Description| Value ---|--- Affected Website:| exactet.ca Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

weather.jorick.us XSS vulnerability

Open Bug Bounty ID: OBB-597279 Description| Value ---|--- Affected Website:| weather.jorick.us Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Directory Traversal

jacobj66-weather is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

CVE-2018-1000048

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

CVE-2018-1000048

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

CVE-2018-1000045

NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...

Design/Logic Flaw

NASA RtRetrievalFramework version v1.0 contains a CWE-502 vulnerability in Data retrieval functionality of RtRetrieval framework that can result in remote code execution. This attack appear to be exploitable via Victim tries to retrieve and process a weather data file...

CVE-2018-1000045

NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...

CVE-2018-1000045

NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...

CVE-2018-1000045: Deserialization of Untrusted Data

NASA Singledop version v1.0 contains a CWE-502 vulnerability in NASA Singledop library Weather data that can result in remote code execution. This attack appear to be exploitable via Victim opening a specially crafted radar data file. This vulnerability appears to have been fixed in v1.1...