CVE-2018-11167

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 25 of 46...

CVE-2018-11178

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 36 of 46...

CVE-2018-11165

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...

CVE-2018-11185

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 43 of 46...

CVE-2018-11147

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 5 of 46...

CVE-2018-11146

Affected product: Quest DR Series Disk Backup Software. Vulnerabilities allow remote command execution via several web/API entry points; notably, command injection in update_pw and setAdminPassword. Versions prior to 4.0.3.1 are implicated. Build 4.0.3.1 reportedly fixes these issues. If upgradin...

CVE-2018-11179

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 37 of 46...

CVE-2018-11155

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 13 of 46...

CVE-2018-11144

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 2 of 46...

CVE-2018-11168

Summary: CVE-2018-11168 affects Quest DR Series Disk Backup software prior to 4.0.3.1 and is part of a broader set of command‑injection vulnerabilities in DR Series appliances. The connected documents describe concrete vectors via the JSON‑RPC API that enable remote command execution, including u...

CVE-2018-11183

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...

CVE-2018-11154

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...

CVE-2018-11182

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 40 of 46...

CVE-2018-11178

CVE-2018-11178 is part of a set of related command-injection vulnerabilities in Quest DR Series Disk Backup appliances (Quest DR Series Disk Backup Software) affecting versions up to 4.0.3.1. The CoreLabs CORE-2018-0002 advisory and subsequent materials describe multiple CVEs (e.g., CVE-2018-1114...

CVE-2018-11161

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...

CVE-2018-11157

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 15 of 46...

CVE-2018-11174

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 32 of 46...

HPE Data Protector Heap Buffer Overflow

The vulnerability of the HPE Data Protector backup tool arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

NovaBACKUP Arbitrary Command Execution

The vulnerability of the datamover module of the Linux operating system-based NovaBACKUP data center backup software exists due to insufficient verification of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

NetBackup Appliance Backup Command Injection

The vulnerability of NetBackup Appliance’s backup and recovery software lies in the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...