IPS Signature Database Update
| Name | ips.sig | ||
| Version | 2.1.350 | ||
| StoneOS | StoneOS 5.0R4F3.1 or above | ||
| Release Date | 2020-05-25 | ||
| New Signature (21) |
Rule ID | Rule Name | Detail |
| 713940 | Ruby On Rails File Content Disclosure ('doubletap') Vulnerability (CVE-2019-5418) | click for more information | |
| 330063 | Tautulli v2.1.9 - Shutdown Denial of Service Vulnerability (CVE-2019-19833) | click for more information | |
| 324354 | rConfig Unauthenticated RCE Vulnerability (CVE-2019-16662) | click for more information | |
| 713941 | Rockwell Automation FactoryTalk RNADiagnosticsSrv Deserialization Vulnerability -1 (CVE-2020-6967) | click for more information | |
| 1905797 | MS17-010 EternalRomance/EternalSynergy/EternalChampion SMB Remote Windows Command Execution Vulnerability (CVE-2017-0143) | click for more information | |
| 330069 | D-Link unauthenticated command injection vulnerability (CVE-2019-16920) | click for more information | |
| 310959 | SAP Sybase Event Stream Processor esp_parse ConnectionType Unsafe Pointer Dereference Vulnerability -3 (CVE-2014-3458) | click for more information | |
| 713896 | Sangoma Asterisk manager.c OS Command Injection Vulnerability (CVE-2019-18610) | click for more information | |
| 505708 | OpenSMTPD smtp_mailaddr Remote Command Execution Vulnerability (CVE-2020-7247) | click for more information | |
| 330067 | D-Link DIR-859 Unauthenticated Remote Command Execution Vulnerability (CVE-2019-17621) | click for more information | |
| 330066 | rConfig v3.9.3 Authenticated Remote Code Execution Vulnerability (CVE-2019-19509) | click for more information | |
| 330057 | Total js CMS 12 Widget JavaScript Code Injection Vulnerability (CVE-2019-15954) | click for more information | |
| 330003 | EyesOfNetwork AutoDiscovery Target Nmap Privilege Escalation Vulnerability (CVE-2020-8655) | click for more information | |
| 310961 | SAP Sybase Event Stream Processor esp_parse ConnectionType Unsafe Pointer Dereference Vulnerability -2 (CVE-2014-3458) | click for more information | |
| 310960 | SAP Sybase Event Stream Processor esp_parse ConnectionType Unsafe Pointer Dereference Vulnerability -5 (CVE-2014-3458) | click for more information | |
| 330129 | Apache Tomcat HTTP2 Denial of Service Vulnerability (CVE-2019-0199) | click for more information | |
| 713942 | Rockwell Automation FactoryTalk RNADiagnosticsSrv Deserialization Vulnerability -2 (CVE-2020-6967) | click for more information | |
| 306577 | SAP Sybase Event Stream Processor esp_parse ConnectionType Unsafe Pointer Dereference Vulnerability -1 (CVE-2014-3458) | click for more information | |
| 316846 | Wavelink Emulation License Server HTTP Header Processing Buffer Overflow Vulnerability (CVE-2015-4059) | click for more information | |
| 330062 | Nagios XI Authenticated Remote Command Execution Vulnerability (CVE-2019-15949) | click for more information | |
| ...... | |||
| Updated Signature (6) |
Rule ID | Rule Name | Detail |
| 324056 | Cisco IOS XE WebUI 'snortcheck.lua' Authenticated Command Injection Vulnerability (CVE-2019-12650) | Click here for more information | |
| 324216 | WordPress Plugin Photo Gallery Authenticated SQL Injection Vulnerability (CVE-2019-16119) | Click here for more information | |
| 323008 | Atlassian JIRA Template Injection RCE Vulnerability (CVE-2019-11581) | Click here for more information | |
| 324050 | OpenProject 'sortBy' query Reflected Cross Site Scripting Vulnerability (CVE-2019-17092) | Click here for more information | |
| 322908 | Webmin Command Injection Vulnerability (CVE-2019-15107) | Click here for more information | |
| 324413 | ZyXEL NAS weblogin.cgi OS Command Injection Vulnerability (CVE-2020-9054) | Click here for more information | |