3823 matches found
europeanqualitytc.com Cross Site Scripting vulnerability OBB-2979103
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: An Unspecified Vulnerability in Java runtime affects Predictive Maintenance and Quality and Predictive Maintenance Insights (CVE-2021-35603)
Summary IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises is bundled with IBM SPSS, IBM Cognos, IBM DB2 and IBM Websphere Application Server Liberty. Some of the component products are vulnerable to unspecified vulnerability in Java runtime CVE-2021-35603. Thi...
Tenda AC18 缓冲区错误漏洞
The Tenda AC18 is a router from the Chinese company Tenda. A stack overflow vulnerability exists in Tenda AC18 version V15.03.05.19, which originates from the formSetQosBand function not performing a size check on input data, and can be exploited by an attacker to cause remote code execution or...
Security Bulletin: Security vulnerability in WebSphere Application Server Liberty shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-39031)
Summary IBM WebSphere Application Server Liberty is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. WebSphere Application Server Liberty is vulnerable to Identity Spoofing CVE-2022-22475. Vulnerability Details Refer to the security bulletins...
Security Bulletin: Multiple security vulnerabilities may affect IBM DB2 shipped with Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises (CVE-2021-38931,CVE-2021-20373)
Summary IBM DB2 is shipped with IBM Predictive Maintenance and Quality and Predictive Maintenance Insights On-Premises. Information about security vulnerabilities affecting DB2 has been published in multiple security bulletins as below. Interim fix is provided by DB2 for each of the fix pack...
GHSA-J8XR-2279-88QJ Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference
Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to provide crafted API responses from Rational Quality Manager to have Jenkins parse a crafted XML document that uses external entities for extraction of...
Jenkins RQM Plugin vulnerable to Improper Restriction of XML External Entity Reference
Jenkins RQM Plugin 2.8 and earlier does not configure its XML parser to prevent XML external entity XXE attacks. This allows attackers able to provide crafted API responses from Rational Quality Manager to have Jenkins parse a crafted XML document that uses external entities for extraction of...
September 20, 2022-KB5017859 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11
None None...
September 20, 2022 Servicing stack update (KB5017395)
None None...
PT-2022-33439 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.19.2 Description: The issue is related to the handling of rq qos requests, where the same type should not be added more than once. The actual impact and attack plausibility have not yet been proven...
Explained: Fuzzing for security
Fuzzing, or fuzz testing, is defined as an automated software testing method that uses a wide range of invalid and unexpected data as input to find flaws in the software undergoing the test. The flaws do not necessarily have to be security vulnerabilities. Fuzzing can also bring other undesirable...
CVE-2022-36780
Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the recorded calls without authenticate to the system. Attacker sends crafted URL to the system:...
CVE-2022-36780 Avdor CIS - crystal quality Credentials Management Errors
Avdor CIS - crystal quality Credentials Management Errors. The product is phone call recorder, you can hear all the recorded calls without authenticate to the system. Attacker sends crafted URL to the system:...
How GRC protects the value of organizations — A simple guide to data quality and integrity
Contemporary organizations understand the importance of data and its impact on improving interactions with customers, offering quality products or services, and building loyalty. Data is fundamental to business success. It allows companies to make the right decisions at the right time and deliver...
September 13, 2022—KB5017315 (OS Build 17763.3406) - EXPIRED
None None...
Avdor CIS Crystal Quality Solutions crystal quality Credentials Management 访问控制错误漏洞
Avdor CIS Crystal Quality Solutions crystal quality Credentials Management is a telephone recorder from Avdor CIS Crystal Quality Solutions, Israel. A security vulnerability exists in Avdor CIS Crystal Quality Solutions crystal quality Credentials Management that originates from the ability to he...
KB5017398: Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: September 13, 2022
KB5017398: Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: September 13, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable...
September 13, 2022-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 (KB5017530)
September 13, 2022-Security and Quality Rollup for .NET Framework 3.5, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Server 2012 KB5017530 Applies to: Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.6.2 Microsoft .NET Framework 4.7 Microsoft .NET Framework 4.7.1 Microsoft .NET Framework 4.7.2...