Quest

CVE-2026-9787 Jun 25, 00:17 HIGH This Week

Remote code execution in Quest NetVault Backup allows authenticated remote attackers - who can bypass the product's existing authentication mechanism - to run arbitrary OS commands as SYSTEM via the NVBULogDaemon JSON-RPC interface. The flaw stems from unsanitized user-supplied input being passed into a system call (CWE-78), and the credentialed authentication barrier is undermined by an acknowledged bypass, effectively widening exposure. No public exploit has been identified at time of analysis, but the issue was disclosed by Trend Micro ZDI (ZDI-26-376) and carries a CVSS of 8.8.

CVE-2026-9786 Jun 25, 00:17 HIGH This Week

Remote code execution in Quest NetVault Backup arises through SQL injection in the NVBUDashboard component's JSON-RPC message handler, letting attackers run arbitrary code in the NETWORK SERVICE context. While the flaw nominally requires authentication, ZDI reports the product's authentication mechanism can be bypassed, materially lowering the access bar. No public exploit is identified at time of analysis and the issue is not listed in CISA KEV, but its CVSS 3.0 base score of 8.8 and full-impact (C:H/I:H/A:H) profile mark it as high priority for any exposed deployment.

CVE-2026-9785 Jun 25, 00:17 HIGH This Week

Remote code execution in Quest NetVault Backup arises from a SQL injection flaw in the handling of NVBULibrarySlot JSON-RPC messages, where a user-supplied string is concatenated into a SQL query without validation. Although the JSON-RPC interface nominally requires authentication, ZDI notes the existing authentication mechanism can be bypassed, so a remote attacker can reach the vulnerable code path and execute arbitrary code in the context of the NETWORK SERVICE account. No public exploit has been identified at time of analysis and the issue is not listed in CISA KEV; EPSS data was not provided.

CVE-2026-9784 Jun 25, 00:17 HIGH This Week

SQL injection in Quest NetVault Backup's NVBULibraryPort JSON-RPC handler allows remote attackers to execute arbitrary code as NETWORK SERVICE on affected installations. While exploitation nominally requires authentication (CVSS PR:L), the ZDI advisory states the existing authentication mechanism can be bypassed, effectively lowering the barrier to remote attackers. There is no public exploit identified at time of analysis and no CISA KEV listing, but the issue was coordinated through Trend Micro's Zero Day Initiative (ZDI-CAN-27631 / ZDI-26-373) and carries a CVSS 3.0 base score of 8.8.

CVE-2026-9783 Jun 25, 00:17 HIGH This Week

SQL injection leading to remote code execution affects Quest NetVault Backup, where the NVBURemovableMedia component fails to validate a user-supplied string before constructing SQL queries. Although authentication is nominally required, ZDI notes the existing authentication mechanism can be bypassed, effectively lowering the barrier to network-based attackers who can then execute code in the context of the NETWORK SERVICE account. No public exploit identified at time of analysis; the issue was reported privately by Trend Micro's Zero Day Initiative (ZDI-CAN-27632 / ZDI-26-372).

CVE-2026-9782 Jun 25, 00:17 HIGH This Week

Remote code execution in Quest NetVault Backup arises from SQL injection in the NVBUDeviceDrive JSON-RPC message handler, where a user-supplied string is concatenated into a SQL query without validation (CWE-89). Although the product requires authentication, the existing authentication mechanism can be bypassed, so remote attackers can reach the flaw and execute arbitrary code in the context of the NETWORK SERVICE account. Discovered and reported through Trend Micro's Zero Day Initiative (ZDI-26-371, formerly ZDI-CAN-27633); no public exploit identified at time of analysis and the CVE is not listed in CISA KEV.

CVE-2026-9781 Jun 25, 00:17 HIGH This Week

Remote code execution in Quest NetVault Backup arises from SQL injection in the NVBURASDevice JSON-RPC message handler, where attacker-controlled input is concatenated into SQL queries. Although authentication is nominally required, ZDI notes the existing authentication mechanism can be bypassed, so attackers can reach the vulnerable endpoint and execute code in the NETWORK SERVICE context. No public exploit identified at time of analysis, and the issue is not listed in CISA KEV; it was reported privately via Trend Micro's Zero Day Initiative (ZDI-26-370 / ZDI-CAN-27648).

CVE-2026-9780 Jun 25, 00:17 HIGH This Week

Authentication bypass via cross-site scripting in Quest NetVault Backup's addclient3 webpage allows remote attackers to inject arbitrary script that executes in a victim's authenticated session, bypassing access controls. Disclosed through Trend Micro's Zero Day Initiative (ZDI-26-369, formerly ZDI-CAN-27666), the flaw requires user interaction - the target must visit a malicious page or open a malicious file - and can be chained with other weaknesses to achieve code execution in the SYSTEM context. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, though the high CVSS of 8.8 reflects the serious downstream RCE potential.

CVE-2026-7570 Jun 25, 00:17 HIGH This Week

SQL injection leading to remote code execution in Quest NetVault Backup allows attackers to run arbitrary code as the NETWORK SERVICE account by sending crafted JSON-RPC messages to the NVBUDashboard component. While the JSON-RPC interface nominally requires authentication, ZDI reports the existing authentication mechanism can be bypassed, effectively lowering the access barrier. There is no public exploit identified at time of analysis and the issue is not listed in CISA KEV, but it was responsibly disclosed through Trend Micro's Zero Day Initiative (ZDI-26-368, formerly ZDI-CAN-27809).

CVE-2026-7569 Jun 25, 00:17 HIGH This Week

Authentication bypass via cross-site scripting in the Quest NetVault Backup viewclient web interface lets remote attackers inject arbitrary script that, when a victim visits a malicious page or opens a malicious file, runs in the application context and circumvents authentication. Disclosed through Trend Micro's Zero Day Initiative (ZDI-26-377, ZDI-CAN-28202), the flaw can be chained with additional vulnerabilities to achieve code execution as SYSTEM. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the CVSS 8.8 rating reflects the high impact of the auth-bypass-plus-RCE chain.

CVE-2025-32975 Jun 24, 15:15 CRITICAL POC KEV THREAT Emergency

Authentication bypass in Quest KACE Systems Management Appliance allows remote unauthenticated attackers to impersonate any user and achieve complete administrative takeover via SSO mechanism flaws. Confirmed actively exploited (CISA KEV) with publicly available exploit code. Affects versions 13.0.x through 14.1.x across five major release branches. CVSS 10.0 (critical) with changed scope indicates full system compromise. EPSS score of 0.16% appears artificially low given confirmed active exploitation, suggesting targeted attacks rather than widespread scanning.

CVE-2018-11138 May 31, 18:29 CRITICAL POC KEV THREAT Emergency

The '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users and can be abused to execute arbitrary commands on the system. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2017-6553 Apr 29, 16:59 CRITICAL POC PATCH THREAT Act Now

Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 74.0%.

CVE-2012-5896 Nov 17, 21:55 CRITICAL POC THREAT Emergency

The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 81.3%.

CVE-2025-67813 Jan 12, 16:16 MEDIUM This Month

Kace Desktop Authority versions up to 11.3.1 is affected by incorrect default permissions (CVSS 5.3).

CVE-2025-56689 Sep 03, 17:15 MEDIUM POC Monitor

One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA) bypass using response manipulation. Rated medium severity (CVSS 4.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2023-33254 May 21, 22:15 MEDIUM POC This Month

There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2022-30285 Aug 02, 22:15 CRITICAL Act Now

In Quest KACE Systems Management Appliance (SMA) through 12.0, a hash collision is possible during authentication. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2022-29808 Aug 02, 22:15 HIGH This Week

In Quest KACE Systems Management Appliance (SMA) through 12.0, predictable token generation occurs when appliance linking is enabled. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2022-29807 Aug 02, 22:15 CRITICAL Act Now

A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) through 12.0 that can allow for remote code execution via download_agent_installer.php. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2021-44031 Dec 22, 06:15 CRITICAL Act Now

An issue was discovered in Quest KACE Desktop Authority before 11.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2021-44030 Dec 22, 06:15 MEDIUM This Month

Quest KACE Desktop Authority before 11.2 allows XSS because it does not prevent untrusted HTML from reaching the jQuery.htmlPrefilter method of jQuery. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2021-44029 Dec 22, 06:15 CRITICAL Act Now

An issue was discovered in Quest KACE Desktop Authority before 11.2. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2021-44028 Dec 22, 06:15 MEDIUM This Month

XXE can occur in Quest KACE Desktop Authority before 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

CVE-2020-8868 Mar 23, 21:15 CRITICAL Act Now

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight Evolve 9.0.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2019-13081 Nov 06, 15:15 MEDIUM This Month

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the title field in the /common/ticket_associated_tickets.php service desk ticket functionality) that allows. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2019-13080 Nov 06, 15:15 MEDIUM This Month

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via an SVG image and HTML file) that allows an authenticated user to execute arbitrary JavaScript in an. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2019-13079 Nov 06, 15:15 HIGH This Week

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2019-13078 Nov 06, 15:15 HIGH This Week

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2019-13077 Nov 06, 15:15 MEDIUM This Month

Quest KACE Systems Management Appliance Server Center 9.1.317 has an XSS vulnerability (via the sam_detail_titled.php SAM_TYPE parameter) that allows an attacker to create a malicious link in order. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2019-13076 Nov 06, 15:15 HIGH This Week

Quest KACE Systems Management Appliance Server Center 9.1.317 is vulnerable to SQL injection. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2019-12918 Nov 06, 15:15 CRITICAL Act Now

Quest KACE Systems Management Appliance Server Center version 9.1.317 is vulnerable to SQL injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2019-12917 Nov 06, 15:15 MEDIUM This Month

A reflected XSS vulnerability exists in Quest KACE Systems Management Appliance Server Center 9.1.317 affecting the userui/software_library.php component via the PATH_INFO. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2019-10973 Jul 08, 18:15 HIGH PATCH This Week

Quest KACE, all versions prior to version 8.0.x, 8.1.x, and 9.0.x, allows unintentional access to the appliance leveraging functions of the troubleshooting tools located in the administrator user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity.

CVE-2019-11604 May 24, 17:29 MEDIUM POC This Month

An issue was discovered in Quest KACE Systems Management Appliance before 9.1. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2018-11194 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 6 of 6). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11193 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 5 of 6). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11192 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 4 of 6). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11191 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 3 of 6). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11190 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 2 of 6). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11189 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows privilege escalation (issue 1 of 6). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11188 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 46 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11187 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 45 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11186 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 44 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11185 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 43 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11184 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 42 of 46). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11183 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 41 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11182 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 40 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11181 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 39 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11180 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 38 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11179 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 37 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11178 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 36 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11177 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 35 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11176 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 34 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11175 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 33 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11174 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 32 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11173 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 31 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11172 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 30 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11171 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 29 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11170 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 28 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11169 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 27 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11168 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 26 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11167 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 25 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11166 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 24 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11165 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 23 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11164 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 22 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11163 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 21 of 46). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11162 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 20 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11161 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 19 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11160 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 18 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11159 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 17 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11158 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 16 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11157 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 15 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11156 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 14 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11155 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 13 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11154 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 12 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11153 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 11 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11152 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 10 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11151 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 9 of 46). Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11150 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 8 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11149 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 7 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11148 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 6 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11147 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 5 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11146 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11145 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11144 Jun 02, 01:29 HIGH This Week

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46). Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2018-11143 Jun 02, 01:29 CRITICAL Act Now

Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46). Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2018-11142 May 31, 18:29 MEDIUM POC This Month

The 'systemui/settings_network.php' and 'systemui/settings_patching.php' scripts in the Quest KACE System Management Appliance 8.0.318 are accessible only from localhost. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

CVE-2018-11141 May 31, 18:29 CRITICAL POC Act Now

The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management Virtual Appliance 8.0.318 can be abused to write and delete files. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2018-11140 May 31, 18:29 CRITICAL POC Act Now

The 'reportID' parameter received by the '/common/run_report.php' script in the Quest KACE System Management Appliance 8.0.318 is not sanitized, leading to SQL injection (in particular, an. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.