IPS Signature Database Update

Name ips.sig
Version 3.0.228
StoneOS Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above
Release Date 2024-10-14
New Signature
(14)
Rule ID Rule Name StoneOS Detail
338456 pgAdmin 8.3 Session Directory Traversal Vulnerability (CVE-2024-2044) 5.0R4 or above click for more information
338457 NULL-Byte Injection Detection -1 5.5R5 or above click for more information
338454 TongTech upload Interface Arbitrary File Upload Vulnerability 5.0R4 or above click for more information
338455 DataEase Infomation Disclosure Vulnerability (CVE-2024-30269) 5.0R4 or above click for more information
338452 WANHU OA fileupload.controller Aribitrary File Upload Vulnerability 5.0R4 or above click for more information
338453 Topsec Operation and Maintenance Security Audit System synRequest Remote Command Execution Vulnerability 5.5R8 or above click for more information
338450 Yonyou U8 leadconversion.php SQL Injection Vulnerability 5.5R8 or above click for more information
338460 NULL-Byte Injection Detection -3 5.5R5 or above click for more information
338451 Yonyou Chanjet T+ FileUploadHandler.ashx Arbitrary File Upload Vulnerability 5.0R4 or above click for more information
338461 NULL-Byte Injection Detection -4 5.5R5 or above click for more information
338448 GiveWP PHP Object Injection Vulnerability (CVE-2024-8353) 5.5R5 or above click for more information
338458 NULL-Byte Injection Detection -2 5.5R5 or above click for more information
338449 Zjhejiang Dianqilai Customer Service System Authentication Bypass Vulnerability 5.0R4 or above click for more information
338459 Mlflow Cross Site Scripting Vulnerability (CVE-2023-6568) 5.5R5 or above click for more information
Updated Signature
(7)
Rule ID Rule Name StoneOS Detail
332482 ColdFusion 8.0.1 Arbitrary File Upload Vulnerability (CVE-2009-2265) 5.5R5 or above Click here for more information
306634 HTTP File Server NULL Byte Injection Vulnerability -4 (CVE-2014-6287) 5.5R5 or above Click here for more information
323796 SysAid Help Desk 'rdslogs' Arbitrary File Upload Vulnerability (CVE-2015-2995) 5.5R5 or above Click here for more information
305090 Microsoft Office XP URL Handling Buffer Overflow Vulnerability (CVE-2004-0848) 5.5R5 or above Click here for more information
317621 Mantis Bug Tracker Verify.php Confirm_hash Remote Password Reset Vulnerability -1 (CVE-2017-7615) 5.5R5 or above Click here for more information
331367 TYPO3 sa-2010-020 Remote File Disclosure Vulnerability (CVE-2010-3714) 5.5R5 or above Click here for more information
330917 ThinkCMF Alias Parameter Arbitrary Code Execution Vulnerability (CVE-2019-7580) 5.5R5 or above Click here for more information