We are in the business of making quilters happy. We do this through fun events, promotions, products, and experiences. It's a pretty great way to spend a life.
Sears is a leading integrated retailer and provider focused on seamlessly connecting the digital and physical shopping experiences to serve our members - wherever, whenever and however they want to shop. We are part of the Transformco family of brands which operates through its subsidiaries, including Sears Home Services and Kmart, with full-line and specialty retail stores across the United States. We are also home to Shop Your Way®, a social shopping platform offering members rewards for shopping at Sears and Kmart as well as with other retail partners. The company is the nation's largest provider of home services, with more than 14 million service and installation calls made annually. For more information, visit https://jobs.sears.com/.
Security & Compliance Standards Overview
No incidents recorded for Missouri Star Quilt Company in 2026.
Sears has 50.0% fewer incidents than the average of same-industry companies with at least one recorded incident.
Missouri Star Quilt Company cyber incidents detection timeline including parent company and subsidiaries
Sears cyber incidents detection timeline including parent company and subsidiaries
Hirschmann EagleSDV version 05.4.01 prior to 05.4.02 contains a denial-of-service vulnerability that causes the device to crash during session establishment when using TLS 1.0 or TLS 1.1. Attackers can trigger a crash by initiating TLS connections with these protocol versions to disrupt service availability.
The stored API keys in temporary browser client is not marked as protected allowing for JavScript console or other errors to allow for extraction of the encryption credentials.
XSS vulnerability in cveInterface.js allows for inject HTML to be passed to display, as cveInterface trusts input from CVE API services
Multiple reflected cross-site scripting (XSS) vulnerabilities in the login.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda and red_url parameters.
A reflected cross-site scripting (XSS) vulnerability in the login_newpwd.php endpoint of Interzen Consulting S.r.l ZenShare Suite v17.0 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL injected into the codice_azienda parameter.
