IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.206 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2024-05-13 | |||
| New Signature (20) |
Rule ID | Rule Name | StoneOS | Detail |
| 337973 | Aspcms commentList.asp SQL Injection Vulnerability | 5.0R4 or above | click for more information | |
| 337976 | Esafenet CDG Remote Code Execution Vulnerability | 5.0R4 or above | click for more information | |
| 337986 | PopojiCMS 2.0.1 Remote Command Execution Vulnerability | 5.5R5 or above | click for more information | |
| 337987 | BMC Compuware iStrobe Web 20.13 Remote Code Execution Vulnerability (CVE-2023-40304) | 5.0R4 or above | click for more information | |
| 337974 | Sangfor SSL VPN checkurl.csp Remote Code Execution Vulnerability | 5.5R5 or above | click for more information | |
| 337984 | IceWarp WebClient basic Remote Command Execution Vulnerability | 5.0R4 or above | click for more information | |
| 337975 | Weaver E-cology clusterupgrade File Upload Vulnerability | 5.5R5 or above | click for more information | |
| 337985 | PHPMyAdmin GetShellBylog Vulnerability | 5.5R5 or above | click for more information | |
| 337982 | D-Link DIR-300/DIR-600 diagnostic.php Command Injection Vulnerability | 5.5R5 or above | click for more information | |
| 324085 | Apache Tomcat JK Connector Authentication Bypass Vulnerability Vulnerability (CVE-2018-11759) | 5.0R4 or above | click for more information | |
| 337983 | DzzOffice index.php Remote Command Execution Vulnerability | 5.0R4 or above | click for more information | |
| 337980 | Zabbix Weak Password Vulnerability | 5.0R4 or above | click for more information | |
| 337990 | SecSSL 3600 Security Access Gateway System Unauthorized Access Vulnerability | 5.0R4 or above | click for more information | |
| 337981 | CLTPHP delSqlFiles.html Arbitrary File Deletion Vulnerability | 5.0R4 or above | click for more information | |
| 337991 | SecGate 3600 Firewall obj_app_upfile Interface Arbitrary File Upload Vulnerability | 5.0R4 or above | click for more information | |
| 337978 | Panabit sy_addmount.php Remote Code Execution Vulnerability | 5.5R5 or above | click for more information | |
| 337989 | Dbappsecurity DAS-USM xmlrpc.sock Arbitrary User Addition Vulnerability | 5.0R4 or above | click for more information | |
| 337988 | WBCE 1.6.0 SQL injection Vulnerability (CVE-2023-39796) | 5.5R5 or above | click for more information | |
| 337979 | Netentsec ns_icg Weak Password Vulnerability | 5.0R4 or above | click for more information | |
| 322275 | Site Editor WordPress Plugin - Local File Inclusion Vulnerability (CVE-2018-7422) | 5.0R4 or above | click for more information | |
| ...... | ||||
| Updated Signature (10) |
Rule ID | Rule Name | StoneOS | Detail |
| 336872 | Dedecms v5.7 Remote File Include Vulnerability (CVE-2015-4553) | 5.0R4 or above | Click here for more information | |
| 323808 | Adobe ColdFusion CKEditor Unrestricted File Upload Vulnerability (CVE-2018-15961) | 5.0R4 or above | Click here for more information | |
| 322826 | Atlassian Crowd Input Validation Error Vulnerability (CVE-2019-11580) | 5.0R4 or above | Click here for more information | |
| 337499 | WordPress Email Subscribers And Newsletters 4.2.3 Arbitrary File Retrieval Vulnerability (CVE-2019-19985) | 5.0R4 or above | Click here for more information | |
| 335304 | WordPress Social Warfare Plugin Cross-Site Scripting Vulnerability (CVE-2019-9978) | 5.5R5 or above | Click here for more information | |
| 333897 | WebSVN OS Command Injection Vulnerability (CVE-2021-32305) | 5.0R4 or above | Click here for more information | |
| 332124 | Oracle WebLogic Remote Code Execution Vulnerability (CVE-2021-2109) | 5.0R4 or above | Click here for more information | |
| 333530 | Apache Solr SSRF Vulnerability (CVE-2021-27905) | 5.0R4 or above | Click here for more information | |
| 337147 | JFrog Artifactory 6.7.3 Admin Login Bypass Vulnerability -1 (CVE-2019-9733) | 5.0R4 or above | Click here for more information | |
| 331182 | Ruby on Rails ActiveStorage Insecure Deserialization Vulnerability (CVE-2019-5420) | 5.5R4 or above | Click here for more information | |