Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2020-9407

IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Iblsoft
Products
Online Weather
CVE-2020-9406

IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.

CVSS 3.1 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Iblsoft
Products
Online Weather
CVE-2020-9405

IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Iblsoft
Products
Online Weather