CVE-2023-40732

A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application does not invalidate the session token on logout. This could allow an attacker to perform session hijacking attacks...

CVE-1999-0741

QMS CrownNet Unix Utilities for 2060 allows root to log on without a password...

CVE-2022-43958

A vulnerability has been identified in QMS Automotive All versions V12.39, QMS Automotive All versions V12.39. User credentials are stored in plaintext in the database without any hashing mechanism. This could allow an attacker to gain access to credentials and impersonate other users...

Siemens User Management Component (UMC) Input Validation Improperity Vulnerability

Opcenter Quality is a quality management system QMS that enables organizations to safeguard compliance, optimize quality, reduce the cost of defects and rework, and achieve operational excellence by improving process stability. simatic pcs neo is a distributed control system DCS. the SINUMERIK...

The vulnerability of the QMS.Mobile module of the software for quality management solutions, which is used by automobile manufacturers like QMS Automotive, allows a violator to forge the application code.

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow a hacker to forge the application code...

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers allows a perpetrator to execute arbitrary code or trigger service failures.

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to deficiencies in data storage. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

The vulnerability of the software for quality management systems in the automotive industry allows attackers to load unlimited amounts of malicious files, enabling them to execute arbitrary code.

The vulnerability of the quality management software for automobile manufacturers, QMS Automotive, is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by loading a specially crafted file...

Siemens QMS Automotive Code Issue Vulnerability (CNVD-2023-71216)

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A code issue vulnerability exists in Siemens QMS Automotive, which stems from the affected application's QMS.Mobile module not invalidating session tokens upon logout. An attacker could exploi...

Unspecified Vulnerability in Siemens QMS Automotive

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A security vulnerability exists in Siemens QMS Automotive version V12.39, which stems from a lack of security controls in the affected application to prevent unencrypted communication without...

Siemens QMS Automotive Code Issue Vulnerability

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has a code issue vulnerability that can be exploited by an attacker to upload malicious files, which could lead to code tampering...

Siemens QMS Automotive Security Bypass Vulnerability

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. A security bypass vulnerability exists in Siemens QMS Automotive, which stems from the affected application's QMS.Mobile module storing sensitive application data in external, unsecured storag...

Siemens QMS Automotive Information Disclosure Vulnerability (CNVD-2023-71223)

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to enumerate usernames and identify valid usernames...

Siemens QMS Automotive Access Control Error Vulnerability

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive suffers from an Access Control Error vulnerability that stems from a lack of sufficient authorization checks in the QMS.Mobile module of the affected application. An...

Siemens QMS Automotive Information Disclosure Vulnerability (CNVD-2023-71222)

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to gain direct access to the database...

Siemens QMS Automotive Information Leakage Hole

Siemens QMS Automotive is a quality management system for the automotive industry from Siemens, Germany. Siemens QMS Automotive has an information disclosure hole that can be exploited by an attacker to perform a memory dump, gain access to credentials, and use them in a simulation...

CVE-2023-40728

A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application stores sensitive application data in an external insecure storage. This could allow an attacker to alter content, leading to arbitrary code execution or denial-of-service...

CVE-2023-40730

A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service...

CVE-2023-40729

A vulnerability has been identified in QMS Automotive All versions V12.39. The affected application lacks security control to prevent unencrypted communication without HTTPS. An attacker who managed to gain machine-in-the-middle position could manipulate, or steal confidential information...

CVE-2023-40730

A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application lacks sufficient authorization checks. This could allow an attacker to access confidential information, perform administrative functions, or lead to a denial-of-service...

CVE-2023-40727

A vulnerability has been identified in QMS Automotive All versions V12.39. The QMS.Mobile module of the affected application uses weak outdated application signing mechanism. This could allow an attacker to tamper the application code...