1240 matches found
CVE-2018-11186
CVE-2018-11186 relates to Quest DR Series Disk Backup appliances (versions before 4.0.3.1) with multiple command-injection vulnerabilities. The CoreLabs advisory details remote code execution vectors via the DR series web interface and JSON-RPC, including unauthenticated and authenticated injecti...
CVE-2018-11162
CVE-2018-11162 corresponds to a command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. The CoreLabs advisory documents a remote, authenticated issue in DRStorageGroup.update where unsanitized input in newGroup (e.g., Name, Compression_mode) is used to build a co...
CVE-2018-11194
Summary: CVE-2018-11194 affects Quest DR Series Disk Backup Software prior to 4.0.3.1, enabling privilege escalation. The related CORE advisory CORE-2018-0002 details multiple command-injection and privilege-escalation vectors on DR Series appliances, describing root-level access via web interfac...
CVE-2018-11144
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 2 of 46...
CVE-2018-11160
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 18 of 46...
CVE-2018-11170
CVE-2018-11170 concerns Quest DR Series Disk Backup Software prior to 4.0.3.1. The concern is a broader set of command-injection vulnerabilities found in the Core Security CORE-2018-0002 advisory, affecting multiple CVEs (e.g., CVE-2018-11143 to CVE-2018-11194) via the JSON-RPC/web interfaces. Th...
CVE-2018-11192
Summary of findings (CVE-2018-11192 family) : The Quest DR Series Disk Backup Appliances (hardware/software) release prior to 4.0.3.1 contain multiple command-injection vulnerabilities in the DR Series web/JSON-RPC interfaces. The CoreLabs CORE-2018-0002 advisory documents a range of CVEs (e.g., ...
CVE-2018-11194
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...
CVE-2018-11172
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 30 of 46...
CVE-2018-11172
CVE-2018-11172 pertains to Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple command-injection vulnerabilities were identified in the DR Series appliances’ web/JSON-RPC interfaces. The CoreLabs advisory details unauthenticated and authenticated vectors that allow remote execut...
CVE-2018-11170
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 28 of 46...
CVE-2018-11183
Quest DR Series Disk Backup Software before 4.0.3.1 contains multiple command-injection vulnerabilities in its JSON-RPC interface, enabling remote code execution (including unauthenticated login) via numerous endpoints. The CoreLabs CORE-2018-0002 advisory details extensive CVEs (e.g., CVE-2018-1...
CVE-2018-11191
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 3 of 6...
CVE-2018-11156
CVE-2018-11156 affects Quest DR Series Disk Backup Software (DR Series appliances) prior to version 4.0.3.1. Multiple connected sources describe a family of command-injection vulnerabilities in the DR Series web UI/JSON‑RPC API that allows remote attackers to execute arbitrary commands on the app...
CVE-2018-11190
The CORE advisory details remote command injection and privilege escalation flaws in Quest DR Series Disk Backup Software prior to build 4.0.3.1. Exploitation occurs via the DR Series web UI/JSON-RPC methods (e.g., Logon, update, add, set, delete, etc.), allowing authenticated or unauthenticated ...
CVE-2018-11148
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 6 of 46...
CVE-2018-11185
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 43 of 46...
CVE-2018-11161
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...