Weather

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-4831 Sep 15, 08:15 CRITICAL Act Now

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncode Ncep allows SQL Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SQLi Weather Ncode Ncep

NVD

CVSS 3.1

9.8

EPSS

0.5%

CVE-2014-6699 Sep 24, 01:55 MEDIUM This Month

The Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain. Rated medium severity (CVSS 5.4). No vendor patch available.

Information Disclosure Google Weather Weather Channel

NVD

CVSS 2.0

5.4

EPSS

0.1%

CVE-2023-4831

EPSS 1% CVSS 9.8

CRITICAL Act Now

SQLi Weather Ncode Ncep

NVD

CVE-2014-6699

EPSS 0% CVSS 5.4

MEDIUM This Month

Information Disclosure Google Weather +1

NVD