Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-11126 State: PUBLISHED Published: 2018-05-15T17:00:00Z Last Updated: 2024-09-17T01:10:51.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/doorgets/CMS/issues/11
CVE ID: CVE-2018-11127 State: PUBLISHED Published: 2018-05-15T17:00:00Z Last Updated: 2024-09-17T03:49:00.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: e107 2.1.7 has CSRF resulting in arbitrary user deletion. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/e107inc/e107/issues/3128
CVE ID: CVE-2018-11128 State: PUBLISHED Published: 2018-05-17T19:00:00 Last Updated: 2024-08-05T08:01:51.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ObjReader::ReadObj() function in ObjReader.cpp in vincent0629 PDFParser allows remote attackers to cause a denial of service (stack-based buffer overflow) or possibly execute arbitrary code via a crafted pdf file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/44
CVE ID: CVE-2018-11129 State: PUBLISHED Published: 2018-05-17T19:00:00 Last Updated: 2024-08-05T08:01:51.757Z Vendors: n/a Products: n/a Problem Types: n/a Description: The header::add_INFO_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/43 - https://usn.ubuntu.com/3974-1/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00039.html
CVE ID: CVE-2018-11130 State: PUBLISHED Published: 2018-05-17T19:00:00 Last Updated: 2024-08-05T08:01:51.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The header::add_FORMAT_descriptor function in header.cpp in VCFtools 0.1.15 allows remote attackers to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted vcf file. Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/43 - https://usn.ubuntu.com/3974-1/ - https://lists.debian.org/debian-lts-announce/2019/05/msg00039.html
CVE ID: CVE-2018-11132 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:51.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: In order to perform actions that require higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue that runs daemonized with root privileges and only allows a set of commands to be executed. A command injection vulnerability exists within this message queue which allows low-privilege users to append arbitrary commands that will be run as root. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-mul
CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11133 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:51.694Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'fmt' parameter of the '/common/run_cross_report.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11134 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:51.023Z Vendors: n/a Products: n/a Problem Types: n/a Description: In order to perform actions that requires higher privileges, the Quest KACE System Management Appliance 8.0.318 relies on a message queue managed that runs with root privileges and only allows a set of commands. One of the available commands allows changing any user's password (including root). A low-privilege user could abuse this feature by changing the password of the 'kace_support' account, which comes disabled by default but has full sudo privileges. Additional Analyst Notes: - CVE Program Container: References: - https:
isabled by default but has full sudo privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11135 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:51.164Z Vendors: n/a Products: n/a Problem Types: n/a Description: The script '/adminui/error_details.php' in the Quest KACE System Management Appliance 8.0.318 allows authenticated users to conduct PHP object injection attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11136 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:52.431Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'orgID' parameter received by the '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, a blind time-based type). Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11137 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:52.221Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' privileges via Directory Traversal. No administrator privileges are needed to execute this script. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11138 State: PUBLISHED Published: 2018-05-31T18:00:00.000Z Last Updated: 2025-10-21T23:45:50.901Z Vendors: n/a Products: n/a Problem Types: n/a Description: The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/44950/ - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11139 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:51.161Z Vendors: n/a Products: n/a Problem Types: n/a Description: The '/common/ajax_email_connection_test.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by any authenticated user and can be abused to execute arbitrary commands on the system. This script is vulnerable to command injection via the unsanitized user input 'TEST_SERVER' sent to the script via the POST method. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11140 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:51.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, an error-based type). Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11141 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:51.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management Virtual Appliance 8.0.318 can be abused to write and delete files respectively via Directory Traversal. Files can be at any location where the 'www' user has write permissions. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11142 State: PUBLISHED Published: 2018-05-31T18:00:00 Last Updated: 2024-08-05T08:01:51.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. This restriction can be bypassed by modifying the 'Host' and 'X_Forwarded_For' HTTP headers in a POST request. An anonymous user can abuse this vulnerability to execute critical functions without authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multi
VE Program Container: References: - https://www.coresecurity.com/advisories/quest-kace-system-management-appliance-multiple-vulnerabilities
CVE ID: CVE-2018-11143 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11144 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11145 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.197Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11146 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11147 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11148 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.212Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11149 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11150 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11151 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 9 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11152 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11153 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11154 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11155 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.143Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11156 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.390Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11157 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.846Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11158 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.246Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11159 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.165Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11160 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11161 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:51.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11162 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.408Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11163 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 21 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11164 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.407Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11165 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11166 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities
CVE ID: CVE-2018-11167 State: PUBLISHED Published: 2018-06-01T21:00:00 Last Updated: 2024-08-05T08:01:52.426Z Vendors: n/a Products: n/a Problem Types: n/a Description: Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46). Additional Analyst Notes: - CVE Program Container: References: - http://seclists.org/fulldisclosure/2018/May/71 - http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html - https://www.coresecurity.com/advisories/quest-dr-series-disk-backup-multiple-vulnerabilities