1062 matches found
CVE-2018-11178
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 36 of 46...
CVE-2018-11172
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 30 of 46...
CVE-2018-11162
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 20 of 46...
CVE-2018-11144
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 2 of 46...
CVE-2018-11148
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 6 of 46...
CVE-2018-11168
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 26 of 46...
CVE-2018-11168
Summary: CVE-2018-11168 affects Quest DR Series Disk Backup software prior to 4.0.3.1 and is part of a broader set of command‑injection vulnerabilities in DR Series appliances. The connected documents describe concrete vectors via the JSON‑RPC API that enable remote command execution, including u...
CVE-2018-11155
CVE-2018-11155 concerns Quest DR Series Disk Backup software prior to 4.0.3.1, where Core Security and CNVD/NVD sources describe multiple command-injection vulnerabilities in the DR appliance’s JSON-RPC/administration interfaces. The most explicit entry notes command injection allowing remote cod...
CVE-2018-11170
CVE-2018-11170 concerns Quest DR Series Disk Backup Software prior to 4.0.3.1. The concern is a broader set of command-injection vulnerabilities found in the Core Security CORE-2018-0002 advisory, affecting multiple CVEs (e.g., CVE-2018-11143 to CVE-2018-11194) via the JSON-RPC/web interfaces. Th...
CVE-2018-11186
CVE-2018-11186 relates to Quest DR Series Disk Backup appliances (versions before 4.0.3.1) with multiple command-injection vulnerabilities. The CoreLabs advisory details remote code execution vectors via the DR series web interface and JSON-RPC, including unauthenticated and authenticated injecti...
CVE-2018-11150
CVE-2018-11150 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The Core Security advisory documents multiple command-injection vulnerabilities in the DR appliances, with CVE-2018-11150 specifically described as a remote command-injection flaw in the replication scheduling subsystem...
CVE-2018-11188
CVE-2018-11188 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs CORE-2018-0002 documents multiple command-injection vulnerabilities in the DR Series appliances (e.g., unauthenticated and authenticated JSON-RPC/API calls) that could allow remote code execution with root priv...
CVE-2018-11145
CVE-2018-11145 affects Quest DR Series Disk Backup Software 4.x prior to 4.0.3.1, enabling command injection via exposed web/JSON‑RPC interfaces. CORE CORE-2018-0002 details multiple command‑injection vectors across DRSeries RPC methods, including login, user management, container/storage actions...
CVE-2018-11177
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 35 of 46...
CVE-2018-11181
Quest DR Series Disk Backup appliances running versions before 4.0.3.1 are affected by multiple command injection vulnerabilities in the web/JSON‑RPC interfaces (e.g., unauthenticated Logon and various authenticated endpoints), enabling remote code execution with root privileges on vulnerable dev...
CVE-2018-11192
Summary of findings (CVE-2018-11192 family) : The Quest DR Series Disk Backup Appliances (hardware/software) release prior to 4.0.3.1 contain multiple command-injection vulnerabilities in the DR Series web/JSON-RPC interfaces. The CoreLabs CORE-2018-0002 advisory documents a range of CVEs (e.g., ...
CVE-2018-11154
CVE-2018-11154 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The CNVD/NVD entries describe multiple command-injection flaws in the DR Series web/API interfaces (registerDR2000v and related license/registration methods) that allow an attacker to inject commands through various inp...
CVE-2018-11189
CVE-2018-11189 applies to Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple command-injection vulnerabilities in the web UI allow an attacker with/without authentication to execute arbitrary commands as root via various API methods. CoreLabs details show a progression of CVEs ...