Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
quest vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-48118
SQL Injection vulnerability in Quest Analytics LLC IQCRM v.2023.9.5 allows a remote malicious user to execute arbitrary code via a crafted request to the Common.svc WSDL page.
Quest-analytics Iqcrm 2023.9.5
1 Github repository
NA
CVE-2024-21625
SideQuest is a place to get virtual reality applications for Oculus Quest. The SideQuest desktop application uses deep links with a custom protocol (`sidequest://`) to trigger actions in the application from its web contents. Because, prior to version 0.10.35, the deep link URLs ...
Sidequestvr Sidequest
NA
CVE-2023-33254
There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an authenticated attacker edits the user-authentication setting...
Quest Kace Systems Deployment Appliance 9.0.146
NA
CVE-2022-38220
An XSS vulnerability exists within Quest KACE Systems Management Appliance (SMA) up to and including 12.1 that may allow remote injection of arbitrary web script or HTML.
Quest Kace Systems Management Appliance
NA
CVE-2022-29807
A SQL injection vulnerability exists within Quest KACE Systems Management Appliance (SMA) up to and including 12.0 that can allow for remote code execution via download_agent_installer.php.
Quest Kace Systems Management Appliance
NA
CVE-2022-29808
In Quest KACE Systems Management Appliance (SMA) up to and including 12.0, predictable token generation occurs when appliance linking is enabled.
Quest Kace Systems Management Appliance
NA
CVE-2022-30285
In Quest KACE Systems Management Appliance (SMA) up to and including 12.0, a hash collision is possible during authentication. This may allow authentication with invalid credentials.
Quest Kace Systems Management Appliance
6.4
CVSSv2
CVE-2022-31555
The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely.
Nurse Quest Project Nurse Quest
4.3
CVSSv2
CVE-2021-44028
XXE can occur in Quest KACE Desktop Authority prior to 11.2 because the log4net configuration file might be controlled by an attacker, a related issue to CVE-2018-1285.
Quest Kace Desktop Authority
7.5
CVSSv2
CVE-2021-44029
An issue exists in Quest KACE Desktop Authority prior to 11.2. This vulnerability allows malicious users to execute remote code through a deserialization exploitation in the RadAsyncUpload function of ASP.NET AJAX. An attacker can leverage this vulnerability when the encryption k...
Quest Kace Desktop Authority
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028
CVE-2024-32406
CVE-2024-25624
IMAP
CVE-2024-2310
CVE-2024-0874
CVE-2024-20359
XXE
remote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »