Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 4 of 46). Date published : 2018-06-01 http://seclists.org/fulldisclosure/2018/May/71 http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 3 of 46). Date published : 2018-06-01 http://seclists.org/fulldisclosure/2018/May/71 http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 2 of 46). Date published : 2018-06-01 http://seclists.org/fulldisclosure/2018/May/71 http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html
Quest DR Series Disk Backup software version before 4.0.3.1 allows command injection (issue 1 of 46). Date published : 2018-06-01 http://seclists.org/fulldisclosure/2018/May/71 http://packetstormsecurity.com/files/148003/Quest-DR-Series-Disk-Backup-Software-4.0.3-Code-Execution.html
MODX Revolution 2.6.3 has XSS. Date published : 2018-06-01 https://github.com/modxcms/revolution/pull/13887 https://github.com/modxcms/revolution/pull/13887/commits/3241473d8213e9551cef4ed0e8ac4645cfbd10c4
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files. Date...