Vulnerabilities > Quest

DATE CVE VULNERABILITY TITLE RISK
2018-02-08 CVE-2017-17414 SQL Injection vulnerability in Quest Netvault Backup 11.3.0.12
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.
network
low complexity
quest CWE-89
7.5
2018-02-08 CVE-2017-17413 SQL Injection vulnerability in Quest Netvault Backup 11.3.0.12
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.
network
low complexity
quest CWE-89
7.5
2018-02-08 CVE-2017-17412 SQL Injection vulnerability in Quest Netvault Backup 11.3.0.12
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12.
network
low complexity
quest CWE-89
7.5
2017-08-07 CVE-2017-12567 SQL Injection vulnerability in Quest products
SQL injection exists in Quest KACE Asset Management Appliance 6.4.120822 through 7.2, Systems Management Appliance 6.4.120822 through 7.2.101, and K1000 as a Service 7.0 through 7.2.
network
low complexity
quest CWE-89
7.5
2017-04-29 CVE-2017-6553 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Quest Privilege Manager FOR Unix
Buffer Overflow in Quest One Identity Privilege Manager for Unix before 6.0.0.061 allows remote attackers to obtain full access to the policy server via an ACT_ALERT_EVENT request that causes memory corruption in the pmmasterd daemon.
network
low complexity
quest CWE-119
critical
10.0
2017-04-14 CVE-2017-6554 Improper Input Validation vulnerability in Quest Privilege Manager 6.0.027/6.0.050
pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.
network
low complexity
quest CWE-20
critical
9.0
2012-11-17 CVE-2012-5897 Permissions, Privileges, and Access Controls vulnerability in Quest Intrust
The (1) SimpleTree and (2) ReportTree classes in the ARDoc ActiveX control (ARDoc.dll) in Quest InTrust 10.4.0.853 and earlier do not properly implement the SaveToFile method, which allows remote attackers to write or overwrite arbitrary files via the bstrFileName argument.
network
quest CWE-264
critical
9.3
2012-11-17 CVE-2012-5896 Unspecified vulnerability in Quest Intrust
The Annotation Objects Extension ActiveX control in AnnotateX.dll in Quest InTrust 10.4.0.853 and earlier does not properly implement the Add method, which allows remote attackers to execute arbitrary code via a memory address in the first argument, related to an "uninitialized pointer."
network
low complexity
quest
critical
10.0
2012-05-01 CVE-2012-0279 Permissions, Privileges, and Access Controls vulnerability in Quest Toad for Data Analysts 3.0.1
Quest Toad for Data Analysts 3.0.1 uses weak permissions (Everyone: Full Control) for the %COMMONPROGRAMFILES%\Quest Shared directory, which allows local users to gain privileges via a Trojan horse file.
local
quest CWE-264
6.9