IPS Signature Database Update
| Name | ips.sig | |||
| Version | 3.0.253 | |||
| StoneOS | Firewall 5.5R8P2 or above, and NIPS/IDS 5.5R5-3.5 or above, and BDS 5.5R8-3.3 or above | |||
| Release Date | 2025-04-21 | |||
| New Signature (12) |
Rule ID | Rule Name | StoneOS | Detail |
| 338799 | DocsGPT 0.12.0 Remote Code Execution Vulnerability (CVE-2025-0868) | 5.0R4 or above | click for more information | |
| 338796 | Ingress-Nginx Controller Configuration Injection Vulnerability (CVE-2025-1098) | 5.5R5 or above | click for more information | |
| 338797 | Ingress-Nginx Controller Configuration Injection Vulnerability (CVE-2025-1097) | 5.5R5 or above | click for more information | |
| 338794 | Kubeflow Regex Denial of Service Vulnerability (CVE-2024-5552) | 5.5R8 or above | click for more information | |
| 338804 | Extensive VC Addons for WPBakery Page Builder Remote Code Execution Vulnerability (CVE-2023-0159) | 5.5R5 or above | click for more information | |
| 338795 | Kubeflow Cross-Site Scripting Vulnerability (CVE-2023-6571) | 5.0R4 or above | click for more information | |
| 338802 | Checkout Mestres do WP for WooCommerce plugin for WordPress Privilege Escalation Vulnerability (CVE-2025-2266) | 5.5R5 or above | click for more information | |
| 338793 | Ragflow Server-Side Request Forgery Vulnerability (CVE-2024-12450) | 5.5R5 or above | click for more information | |
| 338803 | XWiki Standard 14.10 Remote Code Execution Vulnerability (CVE-2023-48292) | 5.0R4 or above | click for more information | |
| 338800 | Artica Proxy 4.50 Remote Code Execution Vulnerability (CVE-2024-2054) | 5.0R4 or above | click for more information | |
| 338801 | Apache HugeGraph Server 1.2.0 Remote Code Execution Vulnerability (CVE-2024-27348) | 5.0R4 or above | click for more information | |
| 338798 | Kubio AI Page Builder Local File Inclusion Vulnerability (CVE-2025-2294) | 5.0R4 or above | click for more information | |
| Updated Signature (13) |
Rule ID | Rule Name | StoneOS | Detail |
| 336312 | Trend Micro Interscan Web Security Virtual Appliance Remote Code Execution Vulnerability | 5.5R5 or above | Click here for more information | |
| 321891 | HPE System Management Homepage gsearch.php.en Cross-Site Scripting (XSS) Vulnerability (CVE-2017-12544) | 5.0R4 or above | Click here for more information | |
| 336247 | Employee Management System Authentication Bypass Vulnerability | 5.5R5 or above | Click here for more information | |
| 336317 | SquirrelMail Authentication Bypass Vulnerability | 5.5R5 or above | Click here for more information | |
| 336126 | Citrix Systems Cross Site Scripting Vulnerability (CVE-2020-8191) | 5.0R4 or above | Click here for more information | |
| 336220 | UCMS v1.4.8 File Upload Arbitrary Command Execution Vulnerability (CVE-2020-25483) | 5.5R5 or above | Click here for more information | |
| 322695 | Best Software SalesLogix 'view' 'id' Parameter SQL Injection Vulnerability (CVE-2004-1612) | 5.0R4 or above | Click here for more information | |
| 335312 | Pandora FMS Arbitrary Command Injection Vulnerability (CVE-2019-20224) | 5.5R5 or above | Click here for more information | |
| 336135 | Tool Pikachu Remote Code Execution 3 | 5.5R5 or above | Click here for more information | |
| 336133 | Tool Pikachu Remote Code Execution 1 | 5.5R5 or above | Click here for more information | |
| 336261 | Nettmp NNT 5.1 SQL Injection Vulnerability (CVE-2021-45814) | 5.5R5 or above | Click here for more information | |
| 322660 | Microsoft FrontPage Server Extensions Cross Site Scripting Vulnerability (CVE-2006-0015) | 5.0R4 or above | Click here for more information | |
| 336197 | WordPress admin-ajax.php XSS Vulnerability (CVE-2022-21662) | 5.5R5 or above | Click here for more information | |