Top technology
Linux 13140
Google 12536
Microsoft 12379
Oracle 6843
Apple 6692
Adobe 6387
Ibm 6336
Cisco 5759
Debian 3919
Mozilla 2895
Apache 2864
Redhat 2592
Online Weather
CRITICAL 9.8
CVE-2020-9406
IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service.
Fix: 4.3.5+
Fix from $2,300
2020-02-26
Online Weather
MEDIUM 6.1
CVE-2020-9405
IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page.
Fix: 4.3.5+
Fix from $1,600
2020-02-26
Online Weather
MEDIUM 5.3
CVE-2020-9407
IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE cookie.
Fix: 4.3.5+
Fix from $1,600
2020-02-26