Lucene search
+L

351 matches found

CNVD
CNVD
added 2017/12/19 12:0 a.m.6 views

Quest NetVault Backup 'NVBUBackupOptionSet Get' Method SQL Injection Vulnerability

Quest NetVault Backup is a suite of data backup software from Quest Software, USA. An SQL injection vulnerability exists in the handling of NVBUBackupOptionSet Get method requests in Quest NetVault Backup, which stems from the program failing to properly validate user-submitted strings before...

9.8CVSS8.6AI score0.0386EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.39 views

Quest NetVault Backup Server Process Manager Service NVBUPhaseStatus Acknowledge Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Acknowledge method requests. The issue results...

7.5CVSS2.1AI score0.09818EPSS
SaveExploits5
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.37 views

Quest NetVault Backup Server Process Manager Service NVBUTransferHistory Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUTransferHistory Get method requests. The issue results from...

7.5CVSS1.1AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.37 views

Quest NetVault Backup Server Process Manager Service NVBUScheduleSet Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUScheduleSet Get method requests. The issue results from the...

7.5CVSS0.8AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.36 views

Quest NetVault Backup Server Process Manager Service NVBUPolicy Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPolicy Get method requests. The issue results from the lack ...

7.5CVSS1.2AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.31 views

Quest NetVault Backup Server Process Manager Service NVBUPhaseStatus GetPlugins Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus GetPlugins method requests. The issue results fr...

7.5CVSS0.5AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.32 views

Quest NetVault Backup Server Process Manager Service NVBUBackupOptionSet Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupOptionSet Get method requests. The issue results from...

10CVSS1.1AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.28 views

Quest NetVault Backup Server Process Manager Service NVBUSourceDeviceSet Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSourceDeviceSet Get method requests. The issue results from...

7.5CVSS1.7AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.34 views

Quest NetVault Backup Server Process Manager Service NVBUBackup ClientList Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup ClientList method requests. The issue results from th...

7.5CVSS1.3AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.39 views

Quest NetVault Backup Server Process Manager Service NVBUBackup JobList Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup JobList method requests. The issue results from the...

7.5CVSS1.3AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.30 views

Quest NetVault Backup Server Process Manager Service NVBUSelectionSet Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUSelectionSet Get method requests. The issue results from the...

7.5CVSS1.1AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.44 views

Quest NetVault Backup Server Process Manager Service NVBUPhaseStatus Count Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Count method requests. The issue results from th...

7.5CVSS1.1AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.32 views

Quest NetVault Backup Server Process Manager Service NVBUEventHistory Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of GET method requests. The issue results from the lack of proper...

7.5CVSS1.3AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.52 views

Quest NetVault Backup Server Process Manager Service NVBUBackup Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup Get method requests. The issue results from the lack ...

7.5CVSS1.3AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.38 views

Quest NetVault Backup Server Process Manager Service NVBUJobHistory Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobHistory Get method requests. The issue results from the...

7.5CVSS1.5AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.275 views

Quest NetVault Backup Server Process Manager Service NVBUBackup TimeRange Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup TimeRange method requests. The issue results from the...

7.5CVSS1.2AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.35 views

Quest NetVault Backup Server Process Manager Service NVBUBackup PluginList Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackup PluginList method requests. The issue results from th...

7.5CVSS1.2AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.37 views

Quest NetVault Backup Server Process Manager Service NVBUBackupTargetSet Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUBackupTargetSet Get method requests. The issue results from...

7.5CVSS1.2AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.37 views

Quest NetVault Backup Server Process Manager Service NVBUPhaseStatus Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUPhaseStatus Get method requests. The issue results from the...

7.5CVSS0.9AI score0.0386EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2017/12/15 12:0 a.m.39 views

Quest NetVault Backup Server Process Manager Service NVBUJobCountHistory Get Method SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue results from...

7.5CVSS1.4AI score0.4816EPSS
SaveExploits0
Rows per page
Query Builder