CVE-2018-11190

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 2 of 6...

CVE-2018-11157

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 15 of 46...

CVE-2018-11149

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 7 of 46...

CVE-2018-11145

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 3 of 46...

CVE-2018-11181

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 39 of 46...

CVE-2018-11175

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 33 of 46...

CVE-2018-11174

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 32 of 46...

CVE-2018-11173

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 31 of 46...

CVE-2018-11167

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 25 of 46...

CVE-2018-11187

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 45 of 46...

CVE-2018-11182

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 40 of 46...

CVE-2018-11163

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 21 of 46...

CVE-2018-11143

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 1 of 46...

CVE-2018-11180

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 38 of 46...

CVE-2018-11173

CVE-2018-11173 concerns Quest DR Series Disk Backup Software prior to 4.0.3.1, with multiple command-injection flaws exposed via the web interface and JSON-RPC API. CoreLabs advisory CORE-2018-0002 documents a family of related vulnerabilities (CVE-2018-11143 through CVE-2018-11194) enabling remo...

CVE-2018-11172

CVE-2018-11172 pertains to Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple command-injection vulnerabilities were identified in the DR Series appliances’ web/JSON-RPC interfaces. The CoreLabs advisory details unauthenticated and authenticated vectors that allow remote execut...

CVE-2018-11174

Quest DR Series Disk Backup Software 4.0.3 prior to 4.0.3.1 is affected by multiple command-injection vulnerabilities in its DR appliances’ JSON-RPC/web interfaces. The Core Security advisory enumerates numerous CVEs (e.g., CVE-2018-11143 through CVE-2018-11179 and related variants) that allow re...

CVE-2018-11159

CVE-2018-11159 (Quest DR Series Disk Backup) Product: Quest DR Series Disk Backup Software (appliances) prior to version 4.0.3.1. Issue: In the JSON-RPC API, the get_storage_group_statistics call accepts a parameter named group that is not sanitized, enabling an attacker to inject system commands...

CVE-2018-11182

CVE-2018-11182 affects Quest DR Series Disk Backup Software (before 4.0.3.1). Core Security CORE-2018-0002 documents multiple command-injection vulnerabilities in the DR Series appliances via the JSON-RPC web interface, allowing remote command execution and, in some vectors, privilege escalation....

CVE-2018-11177

CVE-2018-11177 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The Root Cause is command injection via user-supplied input used to build shell commands in the appliance’s JSON-RPC/web interfaces. The CoreLabs advisory and the companion PoCs enumerate multiple privileged and authent...