Siemens QMS Automotive 安全漏洞

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to enumerate usernames and identify valid usernames...

Siemens QMS Automotive 安全漏洞

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A security bypass vulnerability exists in Siemens QMS Automotive, which stems from the affected application's QMS.Mobile module storing sensitive application data in external, unsecured storag...

Siemens Quality Management System 安全漏洞

QMS Automotive provides the procedures, processes, structure and resources needed to streamline production and ERP operations while effectively managing quality issues. Siemens QMS Automotive is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to access...

IBM Cognos Analytics 授权问题漏洞

IBM Cognos Analytics is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. A command execution vulnerabili...

Siemens Opcenter Quality Private Data Exposure Vulnerability

Opcenter Quality formerly known as "CAQ=QSYS" is a quality management system QMS. A security vulnerability exists in Siemens Opcenter Quality. The vulnerability is due to the private signing key that comes with the product not being adequately protected. No details of the vulnerability are...

Reflections on Women in Cybersecurity

I joined Coalfire in 2014. At the time, there were very few women in cyber, much less in leadership roles. As it sometimes happens, I found myself in an elevator with Tom McAndrew, who is now our CEO. We started talking about the direction of my career and plans for my role as Director of Coalfir...

The vulnerability of the quality management module in the SAP R/3 system lies in the lack of measures taken to neutralize special elements used in SQL queries, allowing attackers to disclose sensitive information.

The vulnerability of the SAP Quality Management module in the SAP R/3 system exists due to the failure to take measures to neutralize special elements used in SQL queries. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information by sending a...

CVE-2019-0393

An SQL Injection vulnerability in SAP Quality Management corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03 allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results...

CVE-2019-0393

An SQL Injection vulnerability in SAP Quality Management corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03 allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results...

Sql injection

An SQL Injection vulnerability in SAP Quality Management corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03 allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results...

CVE-2019-0393

An SQL Injection vulnerability in SAP Quality Management corrected in S4CORE versions 1.0, 1.01, 1.02, 1.03 allows an attacker to carry out targeted database queries that can read individual fields of historical inspection results...

CVE-2019-0393

CVE-2019-0393 describes an SQL Injection in SAP Quality Management that allows an attacker to perform targeted database queries to read individual fields of historical inspection results. The vulnerability affects SAP Quality Management versions prior to the corrected S4CORE releases, with fixes ...

SAP Quality Management CVE-2019-0393 Unspecified SQL Injection Vulnerability

Description SAP Quality Management is prone to an unspecified SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access or modify data, or exploit latent...

Information disclosure

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions...

CVE-2018-17872

Verba Collaboration Compliance and Quality Management Platform before 9.2.1.5545 has Insecure Permissions...

CVE-2018-17872

Verba Collaboration Compliance and Quality Management Platform (Product by Verint/Verba) before version 9.2.1.5545 has Insecure Permissions (Improper Access Control). Public advisories and CVE entries indicate affected versions include

Sparta Systems TrackWise TeamAccess module Xss Vulnerability

Exploit for unknown platform in category web applications ============================================================ Sparta Systems TrackWise TeamAccess module Xss Vulnerability ============================================================ ===================== I. BACKGROUND ====================...