CVE-2018-11156

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 14 of 46...

CVE-2018-11193

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 5 of 6...

CVE-2018-11194

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...

CVE-2018-11176

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 34 of 46...

CVE-2018-11170

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 28 of 46...

CVE-2018-11161

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...

CVE-2018-11165

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...

CVE-2018-11154

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...

CVE-2018-11153

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 11 of 46...

CVE-2018-11152

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 10 of 46...

CVE-2018-11150

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 8 of 46...

CVE-2018-11183

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...

CVE-2018-11192

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 4 of 6...

CVE-2018-11171

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 29 of 46...

CVE-2018-11169

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 27 of 46...

CVE-2018-11171

CVE-2018-11171 concerns Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple command-injection flaws exist in the web UI/JSON-RPC API allowing remote code execution with root privileges. Documentation in CORE-2018-0002 enumerates a large set of related CVEs (e.g., CVE-2018-11143 ...

CVE-2018-11185

CVE-2018-11185 pertains to Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple input vectors in the web interface/JSON‑RPC allow command execution. The CoreLabs Core Advisory details a wide set of command‑injection flaws (e.g., unauthenticated and authenticated paths) across num...

CVE-2018-11170

CVE-2018-11170 concerns Quest DR Series Disk Backup Software prior to 4.0.3.1. The concern is a broader set of command-injection vulnerabilities found in the Core Security CORE-2018-0002 advisory, affecting multiple CVEs (e.g., CVE-2018-11143 to CVE-2018-11194) via the JSON-RPC/web interfaces. Th...

CVE-2018-11181

Quest DR Series Disk Backup appliances running versions before 4.0.3.1 are affected by multiple command injection vulnerabilities in the web/JSON‑RPC interfaces (e.g., unauthenticated Logon and various authenticated endpoints), enabling remote code execution with root privileges on vulnerable dev...

CVE-2018-11150

CVE-2018-11150 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The Core Security advisory documents multiple command-injection vulnerabilities in the DR appliances, with CVE-2018-11150 specifically described as a remote command-injection flaw in the replication scheduling subsystem...