1240 matches found
CVE-2018-11187
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 45 of 46...
CVE-2018-11148
The provided documents confirm a set of command-injection vulnerabilities in Quest DR Series Disk Backup Software running older than 4.0.3.1. Specifically, the CoreLabs CORE-2018-0002 advisory details multiple CVEs (notably CVE-2018-11143 through CVE-2018-11179 variants) that allow remote code ex...
CVE-2018-11168
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 26 of 46...
CVE-2018-11178
CVE-2018-11178 is part of a set of related command-injection vulnerabilities in Quest DR Series Disk Backup appliances (Quest DR Series Disk Backup Software) affecting versions up to 4.0.3.1. The CoreLabs CORE-2018-0002 advisory and subsequent materials describe multiple CVEs (e.g., CVE-2018-1114...
CVE-2018-11158
The CVE-2018-11158 entry concerns Quest DR Series Disk Backup Software. CoreSecurity’s CORE-2018-0002 and related materials describe multiple command-injection vulnerabilities in DR Series appliances (versions prior to 4.0.3.1) with both unauthenticated and authenticated vectors via the web UI an...
CVE-2018-11151
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 9 of 46...
CVE-2018-11168
Summary: CVE-2018-11168 affects Quest DR Series Disk Backup software prior to 4.0.3.1 and is part of a broader set of command‑injection vulnerabilities in DR Series appliances. The connected documents describe concrete vectors via the JSON‑RPC API that enable remote command execution, including u...
CVE-2018-11153
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 11 of 46...
CVE-2018-11161
CVE-2018-11161 is a real command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. Connected sources (NVD, CNVD, CoreLabs CORE-2018-0002) describe multiple CVEs in the DR Series family, with CVE-2018-11161 specifically noting that the StorageGroupService deletion p...
CVE-2018-11150
CVE-2018-11150 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The Core Security advisory documents multiple command-injection vulnerabilities in the DR appliances, with CVE-2018-11150 specifically described as a remote command-injection flaw in the replication scheduling subsystem...
CVE-2018-11167
CVE-2018-11167 affects Quest DR Series Disk Backup Software prior to 4.0.3.1, enabling command injection through the appliance web interface/JSON-RPC paths. Core documentation shows a family of related command-injection vulnerabilities (e.g., unauthenticated login and authenticated actions) that ...
CVE-2018-11150
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 8 of 46...
CVE-2018-11192
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 4 of 6...
CVE-2018-11154
CVE-2018-11154 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The CNVD/NVD entries describe multiple command-injection flaws in the DR Series web/API interfaces (registerDR2000v and related license/registration methods) that allow an attacker to inject commands through various inp...
CVE-2018-11165
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...
CVE-2018-11184
CVE-2018-11184 affects Quest DR Series Disk Backup Software up to build 4.0.3.1, where the UsageService’s get usage operation can be abused to inject commands via the type parameter (as shown in the 7.42 example). The vulnerability arises from unsanitized user input used to construct a command li...
CVE-2018-11186
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 44 of 46...
CVE-2018-11183
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 41 of 46...
CVE-2018-11151
Concrete details found: CVE-2018-11151 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The vulnerability is a command-injection issue in the DR series web/JSON-RPC interface, notably via setResetOptions (admin_email/relay_host) and related RPC methods (e.g., login, update, add, joi...