270 matches found
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 13 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 33 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 42 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 28 of 46...
Privilege escalation
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 3 of 6...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 34 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 5 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 30 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 4 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 25 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 9 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 35 of 46...
CVE-2018-11162
CVE-2018-11162 corresponds to a command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. The CoreLabs advisory documents a remote, authenticated issue in DRStorageGroup.update where unsanitized input in newGroup (e.g., Name, Compression_mode) is used to build a co...
CVE-2018-11165
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...
CVE-2018-11161
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...
CVE-2018-11183
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...
CVE-2018-11154
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...
CVE-2018-11146
Affected product: Quest DR Series Disk Backup Software. Vulnerabilities allow remote command execution via several web/API entry points; notably, command injection in update_pw and setAdminPassword. Versions prior to 4.0.3.1 are implicated. Build 4.0.3.1 reportedly fixes these issues. If upgradin...
CVE-2018-11194
Summary: CVE-2018-11194 affects Quest DR Series Disk Backup Software prior to 4.0.3.1, enabling privilege escalation. The related CORE advisory CORE-2018-0002 details multiple command-injection and privilege-escalation vectors on DR Series appliances, describing root-level access via web interfac...