CVE-2018-11174

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 32 of 46...

CVE-2018-11145

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 3 of 46...

CVE-2018-11158

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 16 of 46...

CVE-2018-11159

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 17 of 46...

CVE-2018-11148

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 6 of 46...

CVE-2018-11149

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 7 of 46...

CVE-2018-11161

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...

CVE-2018-11157

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 15 of 46...

CVE-2018-11163

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 21 of 46...

CVE-2018-11189

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 1 of 6...

CVE-2018-11190

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 2 of 6...

CVE-2018-11193

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 5 of 6...

CVE-2018-11181

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 39 of 46...

CVE-2018-11188

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 46 of 46...

CVE-2018-11186

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 44 of 46...

CVE-2018-11162

CVE-2018-11162 corresponds to a command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. The CoreLabs advisory documents a remote, authenticated issue in DRStorageGroup.update where unsanitized input in newGroup (e.g., Name, Compression_mode) is used to build a co...

CVE-2018-11166

Summary (supported by provided documents): Quest DR Series Disk Backup Software, versions prior to 4.0.3.1, contains multiple command-injection vulnerabilities (CVE-2018-11143 through CVE-2018-11194) in its DR appliance web/JSON-RPC interfaces. The CoreLabs advisory CORE-2018-0002 details numerou...

CVE-2018-11175

CVE-2018-11175 and related CVEs describe multiple remote command injection flaws in Quest DR Series Disk Backup Appliances prior to 4.0.3.1. Core Security/CoreLabs and CNVD/NVD entries confirm affected components include the web UI and JSON-RPC endpoints, enabling attackers to execute arbitrary c...

CVE-2018-11164

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 22 of 46...

CVE-2018-11179

The CVE-2018-11179 entry concerns Quest DR Series Disk Backup software prior to 4.0.3.1, which, along with related CVEs in the CORE-2018-0002 advisory, contains multiple command-injection vulnerabilities in the DR Series appliances. Affected product: Quest DR Series Disk Backup Software (multiple...