267 matches found
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 13 of 46...
Privilege escalation
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 3 of 6...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 26 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 30 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 9 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 35 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 4 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 5 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 25 of 46...
CVE-2018-11183
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...
CVE-2018-11161
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...
CVE-2018-11154
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...
CVE-2018-11165
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...
CVE-2018-11162
CVE-2018-11162 corresponds to a command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. The CoreLabs advisory documents a remote, authenticated issue in DRStorageGroup.update where unsanitized input in newGroup (e.g., Name, Compression_mode) is used to build a co...
CVE-2018-11194
Summary: CVE-2018-11194 affects Quest DR Series Disk Backup Software prior to 4.0.3.1, enabling privilege escalation. The related CORE advisory CORE-2018-0002 details multiple command-injection and privilege-escalation vectors on DR Series appliances, describing root-level access via web interfac...
CVE-2018-11146
Affected product: Quest DR Series Disk Backup Software. Vulnerabilities allow remote command execution via several web/API entry points; notably, command injection in update_pw and setAdminPassword. Versions prior to 4.0.3.1 are implicated. Build 4.0.3.1 reportedly fixes these issues. If upgradin...
CVE-2018-11168
Summary: CVE-2018-11168 affects Quest DR Series Disk Backup software prior to 4.0.3.1 and is part of a broader set of command‑injection vulnerabilities in DR Series appliances. The connected documents describe concrete vectors via the JSON‑RPC API that enable remote command execution, including u...
CVE-2018-11185
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 43 of 46...