https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 04:20:40 +0000 https://cve.radiocsirt.org/vuln/bdu:2018-00478 bdu:2018-00478 https://cve.radiocsirt.org/vuln/bdu:2018-00478 https://cve.radiocsirt.org/vuln/cnvd-2017-37641 cnvd-2017-37641 https://cve.radiocsirt.org/vuln/cnvd-2017-37641 https://cve.radiocsirt.org/vuln/euvd-2026-79508 EUVD-2026-79508 https://cve.radiocsirt.org/vuln/euvd-2026-79508 https://cve.radiocsirt.org/vuln/fkie_cve-2017-17420 <p>This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4231.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4231.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-17420 https://cve.radiocsirt.org/vuln/ghsa-52g3-q9qw-7f39 <p>This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4231.</p> <p>This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Quest NetVault Backup 11.3.0.12. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of NVBUJobCountHistory Get method requests. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to execute code in the context of the underlying database. Was ZDI-CAN-4231.</p> https://cve.radiocsirt.org/vuln/ghsa-52g3-q9qw-7f39 https://cve.radiocsirt.org/vuln/gsd-2017-17420 gsd-2017-17420 https://cve.radiocsirt.org/vuln/gsd-2017-17420