IPS Signature Database Update
| Name | ips.sig | |||
| Version | 2.1.473 | |||
| StoneOS | StoneOS 5.0R4F3.1 or above | |||
| Release Date | 2022-08-29 | |||
| New Signature (35) |
Rule ID | Rule Name | StonesOS | Detail |
| 336972 | Rocket Chat Remote Code Execution Vulnerability (CVE-2021-22911) | 5.5R5 or above | click for more information | |
| 713802 | Ghostscript Failed Restore Command Execution Vulnerability (CVE-2018-16509) | 5.0R4 or above | click for more information | |
| 336982 | Apache Skywalking 8.3.0 SQL Injection Vulnerability | 5.0R4 or above | click for more information | |
| 336961 | Django SQL Injection Vulnerability (CVE-2022-34265) | 5.0R4 or above | click for more information | |
| 336968 | Gitea 1.4.0 Path Traversal Vulnerability | 5.0R4 or above | click for more information | |
| 323846 | Ghostscript Failed Restore Command Execution Vulnerability (CVE-2018-16509) | 5.0R4 or above | click for more information | |
| 336989 | Tool Ysoserial Java Deserialization Payload Detected | 5.0R4 or above | click for more information | |
| 1605137 | MySQL/MariaDB memcmp() SSE authentication bypass Vulnerability (CVE-2012-2122) | 5.5R5 or above | click for more information | |
| 336975 | Suspicious Command Injection Detected | 5.0R4 or above | click for more information | |
| 334041 | Alibaba Nacos AuthFilter Authentication Bypass Vulnerability (CVE-2021-29441) | 5.0R4 or above | click for more information | |
| 711200 | Zabbix Agent Net.tcp.listen Command Injection Vulnerability -3 (CVE-2009-4502) | 5.0R4 or above | click for more information | |
| 336971 | Apache SSI Remote Code Execution Vulnerability | 5.0R4 or above | click for more information | |
| 336988 | Adobe ColdFusion Deserialization Vulnerability (CVE-2017-3066) | 5.0R4 or above | click for more information | |
| 336967 | GhostScript Remote Code Execution Vulnerability (CVE-2019-6116) | 5.0R4 or above | click for more information | |
| 336974 | Tool Godzilla Communication Detected | 5.5R5 or above | click for more information | |
| 336984 | Apache Spark Unauthorized Access Vulnerability | 5.0R4 or above | click for more information | |
| 317580 | Zabbix Agent Net.tcp.listen Command Injection Vulnerability -3 (CVE-2009-4502) | 5.0R4 or above | click for more information | |
| 336963 | FFmpeg Arbitrary File Read Vulnerability (CVE-2016-1897) | 5.0R4 or above | click for more information | |
| 1909021 | Tool AtExec Detected | 5.0R4 or above | click for more information | |
| 715643 | PHP FPM Fastcgi Unauthorized Access Vulnerability | 5.0R4 or above | click for more information | |
| ...... | ||||
| Updated Signature (38) |
Rule ID | Rule Name | StonesOS | Detail |
| 333423 | Zabbix Remote Code Execution Vulnerability (CVE-2020-11800) | 5.0R4 or above | Click here for more information | |
| 330454 | Hadoop YARN ResourceManager Unauthenticated Command Execution Vulnerability | 5.0R4 or above | Click here for more information | |
| 312821 | Apache Activemq Fileserver File Upload Directory Traversal Vulnerability -2 (CVE-2016-3088) | 5.0R4 or above | Click here for more information | |
| 330184 | Spring Data REST PATCH Request Remote Code Execution Vulnerability (CVE-2017-8046) | 5.0R4 or above | Click here for more information | |
| 312095 | Netbsd Tnftp Fetch.c Fetch_url Command Execution Vulnerability -3 (CVE-2014-8517) | 5.0R4 or above | Click here for more information | |
| 323763 | GitList v0.6.0 Code Injection Vulnerability (CVE-2018-1000533) | 5.0R4 or above | Click here for more information | |
| 321798 | Attempted Spring Data Remote Code Execution Vulnerability -1 (CVE-2018-1273) | 5.0R4 or above | Click here for more information | |
| 336861 | SQL Injection Detected | 5.5R5 or above | Click here for more information | |
| 330225 | Supervisor XML-RPC Authenticated Remote Code Execution Vulnerability (CVE-2017-11610) | 5.0R4 or above | Click here for more information | |
| 330180 | Drupal Core PHP Deserialization Remote Code Execution Vulnerability (CVE-2018-7600) | 5.0R4 or above | Click here for more information | |
| 333979 | Spring boot Security OAuth Remote Code Execution Vulnerability (CVE-2016-4977) | 5.0R4 or above | Click here for more information | |
| 715093 | Hadoop Yarn RPC Unauthorized Remote Code Execution | 5.0R4 or above | Click here for more information | |
| 333667 | TikiWiki CMS Authentication Bypass Vulnerability (CVE-2020-15906) | 5.5R5 or above | Click here for more information | |
| 335414 | Drupal core 8 PECL YAML Parser Remote Code Execution Vulnerability (CVE-2017-6920) | 5.0R4 or above | Click here for more information | |
| 323853 | Zabbix toggle_ids SQL Injection Vulnerability (CVE-2016-10134) | 5.5R5 or above | Click here for more information | |
| 321825 | ElasticSearch Directory Traversal Vulnerability (CVE-2015-3337) | 5.0R4 or above | Click here for more information | |
| 331252 | Oracle WebLogic Remote Code Execution Bypass Vulnerability (CVE-2020-14882 CVE-2020-14883 CVE-2020-14750) | 5.0R4 or above | Click here for more information | |
| 336887 | Shellshock Remote Command Injection Vulnerability (CVE-2014-6271) | 5.0R4 or above | Click here for more information | |
| 331248 | Sonatype Nexus Repository Manager ConstraintViolationFactory Code Execution Vulnerability (CVE-2020-10199) | 5.0R4 or above | Click here for more information | |
| 333902 | Elfinder Remote Code Execution Vulnerability (CVE-2021-32682) | 5.0R4 or above | Click here for more information | |
| ...... | ||||