← Back

Weather

weather

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Weather Channel
weather_channel
1 CVE
Ncode Ncep
ncode_ncep
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-4831
1Weather
1Ncode Ncep
Jun 17, 2026
Sep 15, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ncode Ncep allows SQL Injection.This issue affects Ncep: before 20230914 .
CVE-2014-6699
1Weather
1Weather Channel
May 6, 2026
Sep 24, 2014
N/A· v4
N/A· v3
5.4 MEDIUM· v2
The Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information...Show more
The Weather Channel (aka com.weather.Weather) application 5.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.Show less