CVE-2018-11144

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 2 of 46...

CVE-2018-11155

CVE-2018-11155 concerns Quest DR Series Disk Backup software prior to 4.0.3.1, where Core Security and CNVD/NVD sources describe multiple command-injection vulnerabilities in the DR appliance’s JSON-RPC/administration interfaces. The most explicit entry notes command injection allowing remote cod...

CVE-2018-11170

CVE-2018-11170 concerns Quest DR Series Disk Backup Software prior to 4.0.3.1. The concern is a broader set of command-injection vulnerabilities found in the Core Security CORE-2018-0002 advisory, affecting multiple CVEs (e.g., CVE-2018-11143 to CVE-2018-11194) via the JSON-RPC/web interfaces. Th...

CVE-2018-11186

CVE-2018-11186 relates to Quest DR Series Disk Backup appliances (versions before 4.0.3.1) with multiple command-injection vulnerabilities. The CoreLabs advisory details remote code execution vectors via the DR series web interface and JSON-RPC, including unauthenticated and authenticated injecti...

CVE-2018-11185

CVE-2018-11185 pertains to Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple input vectors in the web interface/JSON‑RPC allow command execution. The CoreLabs Core Advisory details a wide set of command‑injection flaws (e.g., unauthenticated and authenticated paths) across num...

CVE-2018-11188

CVE-2018-11188 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs CORE-2018-0002 documents multiple command-injection vulnerabilities in the DR Series appliances (e.g., unauthenticated and authenticated JSON-RPC/API calls) that could allow remote code execution with root priv...

CVE-2018-11144

The connected CORE advisory CORE-2018-0002 documents multiple command-injection vulnerabilities in Quest DR Series Disk Backup appliances running versions prior to 4.0.3.1. The issues affect the DR Series web interfaces and JSON-RPC endpoints, enabling remote command execution (unauthenticated in...

CVE-2018-11147

CVE-2018-11147 pertains to Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple command-injection vulnerabilities exist in the web interface/JSON‑RPC API. Public-advisory text identifies a primary unauthenticated remote code-execution vector (section 7.1) that could allow an atta...

CVE-2018-11145

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 3 of 46...

CVE-2018-11174

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 32 of 46...

CVE-2018-11173

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 31 of 46...

CVE-2018-11163

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 21 of 46...

CVE-2018-11167

CVE-2018-11167 affects Quest DR Series Disk Backup Software prior to 4.0.3.1, enabling command injection through the appliance web interface/JSON-RPC paths. Core documentation shows a family of related command-injection vulnerabilities (e.g., unauthenticated login and authenticated actions) that ...

CVE-2018-11167

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 25 of 46...

CVE-2018-11149

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 7 of 46...

CVE-2018-11151

Concrete details found: CVE-2018-11151 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The vulnerability is a command-injection issue in the DR series web/JSON-RPC interface, notably via setResetOptions (admin_email/relay_host) and related RPC methods (e.g., login, update, add, joi...

CVE-2018-11157

CVE-2018-11157 affects Quest DR Series Disk Backup Software (v4.0.3.1 and earlier). CoreLabs/Core advisory details a command-injection vulnerability in the DR appliance Web/JSON-RPC API, specifically the join domain functionality via the ActiveDirectoryService module where the domain parameter ca...

CVE-2018-11157

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 15 of 46...

CVE-2018-11154

CVE-2018-11154 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The CNVD/NVD entries describe multiple command-injection flaws in the DR Series web/API interfaces (registerDR2000v and related license/registration methods) that allow an attacker to inject commands through various inp...

CVE-2018-11169

CVE-2018-11169 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs CORE-2018-0002 details multiple command-injection vulnerabilities in the DR appliance’s web interface/JSON-RPC API across various components (e.g., login, user update/delete, password updates, container/storage...