1320 matches found
CVE-2018-11146
Affected product: Quest DR Series Disk Backup Software. Vulnerabilities allow remote command execution via several web/API entry points; notably, command injection in update_pw and setAdminPassword. Versions prior to 4.0.3.1 are implicated. Build 4.0.3.1 reportedly fixes these issues. If upgradin...
CVE-2018-11164
CVE-2018-11164 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. Core/ENISA/public docs detail multiple command-injection vulnerabilities exposed via the web UI/JSON-RPC API, enabling remote code execution (some vectors unauthenticated, others requiring an auth token). The flaws aris...
CVE-2018-11184
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 42 of 46...
CVE-2018-11155
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 13 of 46...
CVE-2018-11159
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 17 of 46...
CVE-2018-11147
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 5 of 46...
CVE-2018-11144
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 2 of 46...
CVE-2018-11168
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 26 of 46...
CVE-2018-11150
CVE-2018-11150 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. The Core Security advisory documents multiple command-injection vulnerabilities in the DR appliances, with CVE-2018-11150 specifically described as a remote command-injection flaw in the replication scheduling subsystem...
CVE-2018-11151
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 9 of 46...
CVE-2018-11162
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 20 of 46...
CVE-2018-11158
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 16 of 46...
CVE-2018-11160
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 18 of 46...
CVE-2018-11148
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection issue 6 of 46...
CVE-2018-11145
CVE-2018-11145 affects Quest DR Series Disk Backup Software 4.x prior to 4.0.3.1, enabling command injection via exposed web/JSON‑RPC interfaces. CORE CORE-2018-0002 details multiple command‑injection vectors across DRSeries RPC methods, including login, user management, container/storage actions...
CVE-2018-11160
CVE-2018-11160 affects Quest DR Series Disk Backup Software prior to 4.0.3.1. CoreLabs CORE-2018-0002 describes multiple command-injection vulnerabilities in the DR appliance web/API interfaces, notably in the DRStorageGroup creation path, where inputs such as the group name can be used to constr...
CVE-2018-11186
CVE-2018-11186 relates to Quest DR Series Disk Backup appliances (versions before 4.0.3.1) with multiple command-injection vulnerabilities. The CoreLabs advisory details remote code execution vectors via the DR series web interface and JSON-RPC, including unauthenticated and authenticated injecti...
CVE-2018-11179
The CVE-2018-11179 entry concerns Quest DR Series Disk Backup software prior to 4.0.3.1, which, along with related CVEs in the CORE-2018-0002 advisory, contains multiple command-injection vulnerabilities in the DR Series appliances. Affected product: Quest DR Series Disk Backup Software (multiple...