139 matches found
CVE-2018-11183
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...
CVE-2018-11161
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...
CVE-2018-11162
CVE-2018-11162 corresponds to a command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. The CoreLabs advisory documents a remote, authenticated issue in DRStorageGroup.update where unsanitized input in newGroup (e.g., Name, Compression_mode) is used to build a co...
CVE-2018-11165
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...
CVE-2018-11146
Affected product: Quest DR Series Disk Backup Software. Vulnerabilities allow remote command execution via several web/API entry points; notably, command injection in update_pw and setAdminPassword. Versions prior to 4.0.3.1 are implicated. Build 4.0.3.1 reportedly fixes these issues. If upgradin...
CVE-2018-11154
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...
CVE-2018-11155
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 13 of 46...
CVE-2018-11147
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 5 of 46...
CVE-2018-11148
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 6 of 46...
CVE-2018-11144
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 2 of 46...
CVE-2018-11168
Summary: CVE-2018-11168 affects Quest DR Series Disk Backup software prior to 4.0.3.1 and is part of a broader set of command‑injection vulnerabilities in DR Series appliances. The connected documents describe concrete vectors via the JSON‑RPC API that enable remote command execution, including u...
CVE-2018-11178
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 36 of 46...
CVE-2018-11185
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 43 of 46...
CVE-2018-11181
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 39 of 46...
CVE-2018-11182
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 40 of 46...
CVE-2018-11178
CVE-2018-11178 is part of a set of related command-injection vulnerabilities in Quest DR Series Disk Backup appliances (Quest DR Series Disk Backup Software) affecting versions up to 4.0.3.1. The CoreLabs CORE-2018-0002 advisory and subsequent materials describe multiple CVEs (e.g., CVE-2018-1114...
CVE-2018-11157
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 15 of 46...