IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.225 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2024-09-23 | |||
| New Signature (17) |
Rule ID | Rule Name | StoneOS | Detail |
| 338424 | SPIP connect Parameter Code Injection Vulnerability | 5.0R4 or above | click for more information | |
| 338415 | Jeecg-Boot SQL Injection Vulnerability (CVE-2023-38992) | 5.0R4 or above | click for more information | |
| 338425 | SPIP BigUp Plugin Remote Code Execution Vulnerability (CVE-2024-8517) | 5.5R5 or above | click for more information | |
| 338422 | VICIdial 2.14-917a SQL Injection Vulnerability (CVE-2024-8503) | 5.5R8 or above | click for more information | |
| 338423 | VICIdial 2.14-917a Remote Code Execution Vulnerability (CVE-2024-8504) | 5.5R5 or above | click for more information | |
| 338420 | Hoverfly 1.10.3 Arbitrary File Read Vulnerability (CVE-2024-45388) | 5.0R4 or above | click for more information | |
| 338430 | Ivanti Cloud Service Appliance Authenticated Command Injection Vulnerability (CVE-2024-8190) | 5.5R5 or above | click for more information | |
| 338421 | Apache Ofbiz Unauthenticated Remote Code Execution Vulnerability (CVE-2024-45195) | 5.0R4 or above | click for more information | |
| 338418 | WordPress Plugin TrueBooker 1.0.2 SQL Injection Vulnerability (CVE-2024-6924) | 5.0R4 or above | click for more information | |
| 338428 | WordPress plugin WP AmASIN - The Amazon Affiliate Shop Arbitrary File Reading Vulnerability (CVE-2014-4577) | 5.0R4 or above | click for more information | |
| 338419 | WordPress Plugin Push Notification For Post And BuddyPress 1.93 SQL Injection Vulnerability (CVE-2024-6159) | 5.5R5 or above | click for more information | |
| 338429 | WordPress MP3 Audio Player by Sonaar Arbitrary File Deletion Vulnerability (CVE-2024-7856) | 5.5R5 or above | click for more information | |
| 338416 | Sqlpad Server-Side Template Injection Vulnerability (CVE-2022-0944) | 5.0R4 or above | click for more information | |
| 338426 | WordPress Last.fm Rotation Plugin Arbitrary File Reading Vulnerability (CVE-2014-5181) | 5.0R4 or above | click for more information | |
| 338417 | WordPress Plugin Viral Signup 2.1 SQL Injection Vulnerability (CVE-2024-6926) | 5.0R4 or above | click for more information | |
| 338427 | WordPress Plugin Cross-RSS Arbitrary File Reading Vulnerability (CVE-2014-4941) | 5.0R4 or above | click for more information | |
| 338414 | GestSup Cross-Site Scripting Vulnerability (CVE-2024-23167) | 5.5R5 or above | click for more information | |
| Updated Signature (2) |
Rule ID | Rule Name | StoneOS | Detail |
| 334275 | OpenEMR facility_admin.php Cross Site Scripting Vulnerability (CVE-2019-8368) | 5.0R4 or above | Click here for more information | |
| 338317 | Apache-OFBiz Remote Code Execution Vulnerability (CVE-2024-38856) | 5.5R5 or above | Click here for more information | |