CVE-2018-11144

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 2 of 46...

CVE-2018-11159

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 17 of 46...

CVE-2018-11160

CVE-2018-11160 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs CORE-2018-0002 describes multiple command-injection vulnerabilities in the DR appliance web/API interfaces, notably in the DRStorageGroup creation path, where inputs such as the group name can be used to constr...

CVE-2018-11162

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 20 of 46...

CVE-2018-11178

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 36 of 46...

CVE-2018-11143

Summary of available details: Quest DR Series Disk Backup Software prior to version 4.0.3.1 contains multiple command-injection vulnerabilities exposed via its web/JSON-RPC API. The most critical issue, CVE-2018-11143, allows unauthenticated remote command execution through the Logon endpoint, wi...

CVE-2018-11147

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 5 of 46...

CVE-2018-11187

CVE-2018-11187 affects Quest DR Series Disk Backup Software 4.0.3.1 (and earlier in 4.0.3) through a command injection in the Global View add_member API via the RemoteHost parameter. An unauthenticated attacker could inject commands and gain arbitrary code execution on the appliance (up to root) ...

CVE-2018-11158

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 16 of 46...

CVE-2018-11160

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 18 of 46...

CVE-2018-11151

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 9 of 46...

CVE-2018-11150

CVE-2018-11150 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The Core Security advisory documents multiple command-injection vulnerabilities in the DR appliances, with CVE-2018-11150 specifically described as a remote command-injection flaw in the replication scheduling subsystem...

CVE-2018-11188

CVE-2018-11188 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs CORE-2018-0002 documents multiple command-injection vulnerabilities in the DR Series appliances (e.g., unauthenticated and authenticated JSON-RPC/API calls) that could allow remote code execution with root priv...

CVE-2018-11168

Summary: CVE-2018-11168 affects Quest DR Series Disk Backup software prior to 4.0.3.1 and is part of a broader set of command‑injection vulnerabilities in DR Series appliances. The connected documents describe concrete vectors via the JSON‑RPC API that enable remote command execution, including u...

CVE-2018-11182

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 40 of 46...

CVE-2018-11182

CVE-2018-11182 affects Quest DR Series Disk Backup Software (before 4.0.3.1). Core Security CORE-2018-0002 documents multiple command-injection vulnerabilities in the DR Series appliances via the JSON-RPC web interface, allowing remote command execution and, in some vectors, privilege escalation....

CVE-2018-11186

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 44 of 46...

CVE-2018-11181

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 39 of 46...

CVE-2018-11154

CVE-2018-11154 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The CNVD/NVD entries describe multiple command-injection flaws in the DR Series web/API interfaces (registerDR2000v and related license/registration methods) that allow an attacker to inject commands through various inp...

CVE-2018-11177

CVE-2018-11177 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The Root Cause is command injection via user-supplied input used to build shell commands in the appliance’s JSON-RPC/web interfaces. The CoreLabs advisory and the companion PoCs enumerate multiple privileged and authent...