1320 matches found
CVE-2018-11152
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 10 of 46...
CVE-2018-11153
The CVE-2018-11153 entry concerns Quest DR Series Disk Backup Software prior to 4.0.3.1, where multiple command-injection vulnerabilities were identified across the DR appliance’s JSON-RPC/Web UI surface. The CoreLabs CORE advisory details unauthenticated and authenticated command-injection vecto...
CVE-2018-11164
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 22 of 46...
CVE-2018-11165
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 23 of 46...
CVE-2018-11166
Summary (supported by provided documents): Quest DR Series Disk Backup Software, versions prior to 4.0.3.1, contains multiple command-injection vulnerabilities (CVE-2018-11143 through CVE-2018-11194) in its DR appliance web/JSON-RPC interfaces. The CoreLabs advisory CORE-2018-0002 details numerou...
CVE-2018-11158
The CVE-2018-11158 entry concerns Quest DR Series Disk Backup Software. CoreSecurity’s CORE-2018-0002 and related materials describe multiple command-injection vulnerabilities in DR Series appliances (versions prior to 4.0.3.1) with both unauthenticated and authenticated vectors via the web UI an...
CVE-2018-11161
CVE-2018-11161 is a real command-injection vulnerability in Quest DR Series Disk Backup Software prior to 4.0.3.1. Connected sources (NVD, CNVD, CoreLabs CORE-2018-0002) describe multiple CVEs in the DR Series family, with CVE-2018-11161 specifically noting that the StorageGroupService deletion p...
CVE-2018-11161
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 19 of 46...
CVE-2018-11154
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 12 of 46...
CVE-2018-11156
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 14 of 46...
CVE-2018-11149
CVE-2018-11149 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs/Core advisory CORE-2018-0002 documents a command-injection vulnerability in the DR Series DRCleaner/setCleaner routine, enabling an attacker to inject shell commands via crafted input in the appliance’s web/API...
CVE-2018-11169
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 27 of 46...
CVE-2018-11188
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 46 of 46...
CVE-2018-11194
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 6 of 6...
CVE-2018-11191
CVE-2018-11191 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs describes multiple privilege-escalation vectors resulting from the DR appliance web interface and related components: attackers who gain access can escalate from the webserver user (webadmin) to root via local ...
CVE-2018-11192
Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation issue 4 of 6...
CVE-2018-11193
CVE-2018-11193 is a privilege-escalation flaw in Quest DR Series Disk Backup Software prior to 4.0.3.1. The CoreLabs advisory details multiple command-injection paths in the DR Series Web UI (JSON-RPC) enabling an attacker with web access to reach root via webadmin privileges (e.g., ocashell, env...
CVE-2018-11171
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 29 of 46...