7905 matches found
CVE-2018-11161
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...
CVE-2018-11180
CVE-2018-11180 is a vulnerability in the Quest DR Series CloudPortal registration path where the registrationCode parameter is unsafely used to build a command line. The CoreLabs advisory and PoC details show an attacker can trigger remote command execution by crafting the registrationCode in a r...
CVE-2018-11194
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...
CVE-2018-11193
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 5 of 6...
CVE-2018-11183
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...
CVE-2018-11184
CVE-2018-11184 affects Quest DR Series Disk Backup Software up to build 4.0.3.1, where the UsageService’s get usage operation can be abused to inject commands via the type parameter (as shown in the 7.42 example). The vulnerability arises from unsanitized user input used to construct a command li...
CVE-2018-11175
CVE-2018-11175 and related CVEs describe multiple remote command injection flaws in Quest DR Series Disk Backup Appliances prior to 4.0.3.1. Core Security/CoreLabs and CNVD/NVD entries confirm affected components include the web UI and JSON-RPC endpoints, enabling attackers to execute arbitrary c...
CVE-2018-11183
Quest DR Series Disk Backup Software before 4.0.3.1 contains multiple command-injection vulnerabilities in its JSON-RPC interface, enabling remote code execution (including unauthenticated login) via numerous endpoints. The CoreLabs CORE-2018-0002 advisory details extensive CVEs (e.g., CVE-2018-1...
CVE-2018-11158
The CVE-2018-11158 entry concerns Quest DR Series Disk Backup Software. CoreSecurity’s CORE-2018-0002 and related materials describe multiple command-injection vulnerabilities in DR Series appliances (versions prior to 4.0.3.1) with both unauthenticated and authenticated vectors via the web UI an...
CVE-2018-11149
CVE-2018-11149 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs/Core advisory CORE-2018-0002 documents a command-injection vulnerability in the DR Series DRCleaner/setCleaner routine, enabling an attacker to inject shell commands via crafted input in the appliance’s web/API...
CVE-2018-11171
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 29 of 46...
CVE-2018-11153
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 11 of 46...
CVE-2018-11165
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...
CVE-2018-11192
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 4 of 6...
CVE-2018-11164
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 22 of 46...
CVE-2018-11162
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 20 of 46...
CVE-2018-11186
CVE-2018-11186 relates to Quest DR Series Disk Backup appliances (versions before 4.0.3.1) with multiple command-injection vulnerabilities. The CoreLabs advisory details remote code execution vectors via the DR series web interface and JSON-RPC, including unauthenticated and authenticated injecti...
CVE-2018-11155
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 13 of 46...