346 matches found
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 3 of 46...
Command injection
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 16 of 46...
CVE-2018-11161
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...
CVE-2018-11188
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 46 of 46...
CVE-2018-11146
Affected product: Quest DR Series Disk Backup Software. Vulnerabilities allow remote command execution via several web/API entry points; notably, command injection in update_pw and setAdminPassword. Versions prior to 4.0.3.1 are implicated. Build 4.0.3.1 reportedly fixes these issues. If upgradin...
CVE-2018-11148
The provided documents confirm a set of command-injection vulnerabilities in Quest DR Series Disk Backup Software running older than 4.0.3.1. Specifically, the CoreLabs CORE-2018-0002 advisory details multiple CVEs (notably CVE-2018-11143 through CVE-2018-11179 variants) that allow remote code ex...
CVE-2018-11164
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 22 of 46...
CVE-2018-11161
CVE-2018-11161 is a real command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. Connected sources (NVD, CNVD, CoreLabs CORE-2018-0002) describe multiple CVEs in the DR Series family, with CVE-2018-11161 specifically noting that the StorageGroupService deletion p...
CVE-2018-11162
CVE-2018-11162 corresponds to a command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. The CoreLabs advisory documents a remote, authenticated issue in DRStorageGroup.update where unsanitized input in newGroup (e.g., Name, Compression_mode) is used to build a co...
CVE-2018-11164
CVE-2018-11164 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. Core/ENISA/public docs detail multiple command-injection vulnerabilities exposed via the web UI/JSON-RPC API, enabling remote code execution (some vectors unauthenticated, others requiring an auth token). The flaws aris...
CVE-2018-11169
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 27 of 46...
CVE-2018-11156
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 14 of 46...
CVE-2018-11156
CVE-2018-11156 affects Quest DR Series Disk Backup Software (DR Series appliances) prior to version 4.0.3.1. Multiple connected sources describe a family of command-injection vulnerabilities in the DR Series web UI/JSON‑RPC API that allows remote attackers to execute arbitrary commands on the app...
CVE-2018-11152
CVE-2018-11152 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The vulnerability is a command-injection in the JSON-RPC API (set_compression) where the compressionLevel parameter is unsafely used to build a shell command, enabling remote execution. Affected product: Quest DR Series...
CVE-2018-11150
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 8 of 46...
CVE-2018-11153
The CVE-2018-11153 entry concerns Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple command-injection vulnerabilities were identified across the DR appliance’s JSON-RPC/Web UI surface. The CoreLabs CORE advisory details unauthenticated and authenticated command-injection vecto...
CVE-2018-11153
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 11 of 46...
CVE-2018-11154
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...