CVEs we hold for Quest

Records whose assigning authority named Quest as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-9787Quest NetVault Backup NVBULogDaemon Command Injection Remote Code Execution VulnerabilityQuest NetVault Backup

CVE-2026-9786Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution VulnerabilityQuest NetVault Backup

CVE-2026-9785Quest NetVault Backup NVBULibrarySlot SQL Injection Remote Code Execution VulnerabilityQuest NetVault Backup

CVE-2026-9784Quest NetVault Backup NVBULibraryPort SQL Injection Remote Code Execution VulnerabilityQuest NetVault Backup

CVE-2026-9783Quest NetVault Backup NVBURemovableMedia SQL Injection Remote Code Execution VulnerabilityQuest NetVault Backup

CVE-2026-9782Quest NetVault Backup NVBUDeviceDrive SQL Injection Remote Code Execution VulnerabilityQuest NetVault Backup

CVE-2026-9781Quest NetVault Backup NVBURASDevice SQL Injection Remote Code Execution VulnerabilityQuest NetVault Backup

CVE-2026-9780Quest NetVault Backup addclient3 Cross-Site Scripting Authentication Bypass VulnerabilityQuest NetVault Backup

CVE-2026-7570Quest NetVault Backup NVBUDashboard SQL Injection Remote Code Execution VulnerabilityQuest NetVault Backup

CVE-2026-7569Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass VulnerabilityQuest NetVault Backup

CVE-2026-1901QuestionPro Surveys <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesQuestionPro Surveys

CVE-2026-0824questdb ui Web Console cross site scriptingquestdb ui

CVE-2025-26850no title heldQuest KACE Systems Management Appliance

CVE-2025-12874HTTP Request Smuggling in Quest Coexistence Manager for NotesQuest Coexistence Manager for Notes

CVE-2020-8868no title heldQuest Foglight Evolve

CVE-2019-10973no title heldn/a Quest KACE

CVE-2018-5406The Quest Kace K1000 Appliance misconfigures the Cross-Origin Resource Sharing (CORS) mechanism.Quest Kace K1000 Appliance

CVE-2018-5405The Quest Kace K1000 Appliance is vulnerable to JavaScript injection.Quest Kace K1000 Appliance

CVE-2018-5404The Quest Kace K1000 Appliance is vulnerable to multiple Blind SQL Injections.Quest Kace K1000 Appliance

CVE-2018-1163no title heldQuest NetVault Backup

CVE-2018-1162no title heldQuest NetVault Backup

CVE-2018-1161no title heldQuest NetVault Backup

CVE-2017-17659no title heldQuest NetVault Backup

CVE-2017-17658no title heldQuest NetVault Backup

CVE-2017-17657no title heldQuest NetVault Backup

CVE-2017-17656no title heldQuest NetVault Backup

CVE-2017-17655no title heldQuest NetVault Backup

CVE-2017-17654no title heldQuest NetVault Backup

CVE-2017-17653no title heldQuest NetVault Backup

CVE-2017-17652no title heldQuest NetVault Backup

CVE-2017-17425no title heldQuest NetVault Backup

CVE-2017-17424no title heldQuest NetVault Backup

CVE-2017-17423no title heldQuest NetVault Backup

CVE-2017-17422no title heldQuest NetVault Backup

CVE-2017-17421no title heldQuest NetVault Backup

CVE-2017-17420no title heldQuest NetVault Backup

CVE-2017-17419no title heldQuest NetVault Backup

CVE-2017-17418no title heldQuest NetVault Backup

CVE-2017-17417no title heldQuest NetVault Backup

CVE-2017-17416no title heldQuest NetVault Backup

CVE-2017-17415no title heldQuest NetVault Backup

CVE-2017-17414no title heldQuest NetVault Backup

CVE-2017-17412no title heldQuest NetVault Backup

43 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.