1240 matches found
CVE-2018-11156
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 14 of 46...
CVE-2018-11155
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 13 of 46...
CVE-2018-11184
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 42 of 46...
CVE-2018-11159
CVE-2018-11159 (Quest DR Series Disk Backup) Product: Quest DR Series Disk Backup Software (appliances) prior to version 4.0.3.1. Issue: In the JSON-RPC API, the get_storage_group_statistics call accepts a parameter named group that is not sanitized, enabling an attacker to inject system commands...
CVE-2018-11154
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...
CVE-2018-11190
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 2 of 6...
CVE-2018-11181
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 39 of 46...
CVE-2018-11152
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 10 of 46...
CVE-2018-11152
CVE-2018-11152 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The vulnerability is a command-injection in the JSON-RPC API (set_compression) where the compressionLevel parameter is unsafely used to build a shell command, enabling remote execution. Affected product: Quest DR Series...
CVE-2018-11174
Quest DR Series Disk Backup Software 4.0.3 prior to 4.0.3.1 is affected by multiple command-injection vulnerabilities in its DR appliances’ JSON-RPC/web interfaces. The Core Security advisory enumerates numerous CVEs (e.g., CVE-2018-11143 through CVE-2018-11179 and related variants) that allow re...
CVE-2018-11176
Quest DR Series Disk Backup Software vulnerable to command injection via DREncryption::set_passphrase (CVE-2018-11176). Proof-of-concept shows attacker can inject commands through the passphrase parameter, enabling arbitrary code execution with the appliance’s privileges. The CoreLabs advisory CO...
CVE-2018-11177
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 35 of 46...
CVE-2018-11155
CVE-2018-11155 concerns Quest DR Series Disk Backup software prior to 4.0.3.1, where Core Security and CNVD/NVD sources describe multiple command-injection vulnerabilities in the DR appliance’s JSON-RPC/administration interfaces. The most explicit entry notes command injection allowing remote cod...
CVE-2018-11145
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 3 of 46...
CVE-2018-11166
Summary (supported by provided documents): Quest DR Series Disk Backup Software, versions prior to 4.0.3.1, contains multiple command-injection vulnerabilities (CVE-2018-11143 through CVE-2018-11194) in its DR appliance web/JSON-RPC interfaces. The CoreLabs advisory CORE-2018-0002 details numerou...
CVE-2018-11185
CVE-2018-11185 pertains to Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple input vectors in the web interface/JSON‑RPC allow command execution. The CoreLabs Core Advisory details a wide set of command‑injection flaws (e.g., unauthenticated and authenticated paths) across num...
CVE-2018-11153
The CVE-2018-11153 entry concerns Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple command-injection vulnerabilities were identified across the DR appliance’s JSON-RPC/Web UI surface. The CoreLabs CORE advisory details unauthenticated and authenticated command-injection vecto...
CVE-2018-11175
CVE-2018-11175 and related CVEs describe multiple remote command injection flaws in Quest DR Series Disk Backup Appliances prior to 4.0.3.1. Core Security/CoreLabs and CNVD/NVD entries confirm affected components include the web UI and JSON-RPC endpoints, enabling attackers to execute arbitrary c...
CVE-2018-11163
Quest DR Series Disk Backup Software before 4.0.3.1 is affected by multiple command‑injection vulnerabilities in the DR Series appliances’ web/JSON‑RPC interface. Public details document a range of CVEs (including CVE-2018-11143 to CVE-2018-11194) that allow remote or authenticated attackers to i...