Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15876)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Create Storage Group" method in Quest DR Series Disk Backup Software versions prior to 4.0.3.1. An attacker could exploit this vulnerability to execute system commands...

Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15863)

The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the setResetOptions method in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability to execute commands via the 'adminemail' and...

CVE-2018-11192

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 4 of 6...

CVE-2018-11194

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...

CVE-2018-11185

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 43 of 46...

CVE-2018-11194

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...

CVE-2018-11182

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 40 of 46...

CVE-2018-11161

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...

CVE-2018-11171

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 29 of 46...

CVE-2018-11172

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 30 of 46...

Command injection

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...

PT-2018-15490 · Openssl · Openssl

Name of the Vulnerable Software and Affected Versions: OpenSSL crate versions prior to 0.10.9 Description: A use-after-free issue occurs in CMS Signing, where structures are used after they have been freed. Recommendations: For versions prior to 0.10.9, update to version 0.10.9 or later to resolv...

PHP Login & User Management Code Execution Vulnerability

PHP Login & User Management is a set of PHP and MySQL based website user login and registration management script. An arbitrary file upload vulnerability exists in the /classes/profile.class.php file in versions of PHP Login & User Management prior to 4.1.1. A remote attacker can exploit this...

UCOPIA Wireless Appliance Elevation of Privilege Vulnerability

The UCOPIA Wireless Appliance is a wireless device from the French company UCOPIA. A security vulnerability exists in the chrootholeclient executable file in the UCOPIA Wireless Appliance versions prior to 5.1.8. A remote attacker can exploit this vulnerability by sending parameters with the '$'...

CppCMS Denial of Service Vulnerability

CppCMS is a free , mainly using C + + language development of the Web rapid development framework . JSON parser is one of the JSON parser module . A security vulnerability exists in the JSON parser module in CppCMS versions before 1.2.1. An attacker can exploit this vulnerability to cause a denia...

Multiple Cross-Site Scripting Vulnerabilities in Joomla! Core

Joomla! is an open source content management system CMS. The system provides RSS feeds , site search and other features . Joomla! Core is a Joomla! core. Multiple cross-site scripting vulnerabilities exist in Joomla! Core versions prior to 3.8.8, which stem from the program failing to properly...

Radio Thermostat CT50 and CT80 Local HTTP API Unauthorized Access Vulnerability

Radio Thermostat CT50 and CT80 are both touchscreen thermostat products from Radio Thermostat USA. This product manages the heating and cooling systems in a home.Local HTTP API is one of the local HTTP interfaces. A security vulnerability exists in the Local HTTP API in Radio Thermostat CT50 and...

WordPress Ultimate Member Plugin Arbitrary File Upload Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Ultimate Member is one of the plug-ins used to create a membership site or online community. An arbitrary file upload...

CVE-2018-8866

In Vecna VGo Robot versions prior to 3.0.3.52164, an attacker on an adjacent network could perform command injection...

Matrix Synapse Denial of Service Vulnerability

Matrix is a set of open communication networks of which Synapse is a server implementation. A denial of service vulnerability exists in Matrix Synapse versions prior to 0.28.1. An attacker can exploit this vulnerability to cause a denial of service with the 'depth' value...