PT-2018-9232

Name of the Vulnerable Software and Affected Versions: NASA Singledop version v1.0 Description: The issue is related to a remote code execution flaw in the NASA Singledop library, specifically affecting the Weather data component. This can be exploited when a victim opens a specially crafted rada...

PT-2018-9235

Name of the Vulnerable Software and Affected Versions: NASA RtRetrievalFramework version v1.0 Description: The issue concerns a remote code execution flaw in the Data retrieval functionality of the RtRetrieval framework. This can be exploited when a victim attempts to retrieve and process a weath...

song.phys.au.dk XSS vulnerability

Open Bug Bounty ID: OBB-550696 Description| Value ---|--- Affected Website:| song.phys.au.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

weather-wherever.co.uk XSS vulnerability

Open Bug Bounty ID: OBB-487291 Description| Value ---|--- Affected Website:| weather-wherever.co.uk Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Disclosure Standard:| Coordinated...

weather-finder.com XSS vulnerability

Open Bug Bounty ID: OBB-447415 Description| Value ---|--- Affected Website:| weather-finder.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Chea...

CVE-2017-9245

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL...

CVE-2017-9245

CVE-2017-9245 affects the Google News and Weather app for Android up to version 3.3.1. The root cause is failure to use SSL for server calls, allowing remote attackers to sniff network traffic and read OAuth tokens. Impact is confidentiality (OAuth tokens exposed) with a CVSSv3 base score of 7.5 ...

CVE-2017-9245: Exposure of Sensitive Information to an Unauthorized Actor

The Google News and Weather application before 3.3.1 for Android allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL...

PT-2017-18802

Name of the Vulnerable Software and Affected Versions Google News and Weather application versions prior to 3.3.1 Description The issue allows remote attackers to read OAuth tokens by sniffing the network and leveraging the lack of SSL. Recommendations For versions prior to 3.3.1, update to versi...

Directory Traversal

Overview Affected versions of scott-blanch-weather-app resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the...

southafricanweather.co.za XSS vulnerability

Vulnerable URL: http://www.southafricanweather.co.za/aat/default.asp?Detailedweather=1"...

weather.unisys.com XSS vulnerability

Open Bug Bounty ID: OBB-256698 Description| Value ---|--- Affected Website:| weather.unisys.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

rizabell.com XSS vulnerability

Open Bug Bounty ID: OBB-244127 Description| Value ---|--- Affected Website:| rizabell.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Weather Street Style - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application Weather Street Style published at the 'play' market has multiple vulnerabilities...

local.cndy.org XSS vulnerability

Vulnerable URL: http://local.cndy.org/weather/api.php?callback=prompt/OPENBUGBOUNTY/...

alerts.weather.gov XSS vulnerability

Vulnerable URL: https://alerts.weather.gov/cap/wwaatmget.php?x=OHZ001'%22%26%25prompt/OPENBUGBOUNTY/...

courant.com XSS vulnerability

Vulnerable URL: http://www.courant.com/weather/?regionalZipCode=-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 19383 VIP website status:| Yes Check courant.com SSL connection:|...

twcweather.com Open Redirect vulnerability

Vulnerable URL: http://twcweather.com/twc40/c2.php?TWC/69983114/27984/H/N/V/https://www.openbugbounty.org/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

Yahoo Weather - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Yahoo Weather published at the 'play' market has multiple vulnerabilities...

BloomSky Weather - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application BloomSky Weather published at the 'play' market has multiple vulnerabilities...