Rule Update
22-060 (13 dezembro 2022)
Data de publicação: 13 dezembro 2022
Descrição
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
IPSec-IKE
1011628* - Microsoft Windows Internet Key Exchange (IKE) Protocol Extensions Denial of Service Vulnerability (CVE-2022-34720)
Parse Server
1011608* - Parse Server Remote Code Execution Vulnerability (CVE-2022-39396)
Parse Server Client
1011614* - Parse Server Remote Code Execution Vulnerability (CVE-2022-41878)
1011616* - Parse Server Remote Code Execution Vulnerability (CVE-2022-41879)
SolarWinds Information Service
1011631 - SolarWinds Network Performance Monitor Privilege Escalation Vulnerability (CVE-2022-36960)
Splunk Enterprise
1011640 - Splunk Enterprise Cross-Site Scripting Vulnerability (CVE-2022-43568)
Web Application Common
1011619* - XStream Library Remote Command Execution Vulnerability (CVE-2021-39144)
Web Application PHP Based
1011641 - WordPress 'Availability Calendar' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24604)
1011634* - WordPress 'Limit Login Attempts' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24657)
1011638 - WordPress 'Responsive 3D Slider' Plugin SQL Injection Vulnerability (CVE-2021-24398)
1011636 - WordPress 'ThinkTwit' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24582)
1009644 - WordPress 'W3 Total Cache' Plugin Arbitrary File Read Vulnerability (CVE-2019-6715)
1011639 - WordPress 'WP-Board' Plugin SQL Injection Vulnerability (CVE-2021-24404)
1011635 - WordPress 'youForms Free For CopeCart' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24596)
Zoho ManageEngine
1011626* - Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability (CVE-2022-40770)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.
Deep Packet Inspection Rules:
IPSec-IKE
1011628* - Microsoft Windows Internet Key Exchange (IKE) Protocol Extensions Denial of Service Vulnerability (CVE-2022-34720)
Parse Server
1011608* - Parse Server Remote Code Execution Vulnerability (CVE-2022-39396)
Parse Server Client
1011614* - Parse Server Remote Code Execution Vulnerability (CVE-2022-41878)
1011616* - Parse Server Remote Code Execution Vulnerability (CVE-2022-41879)
SolarWinds Information Service
1011631 - SolarWinds Network Performance Monitor Privilege Escalation Vulnerability (CVE-2022-36960)
Splunk Enterprise
1011640 - Splunk Enterprise Cross-Site Scripting Vulnerability (CVE-2022-43568)
Web Application Common
1011619* - XStream Library Remote Command Execution Vulnerability (CVE-2021-39144)
Web Application PHP Based
1011641 - WordPress 'Availability Calendar' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24604)
1011634* - WordPress 'Limit Login Attempts' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24657)
1011638 - WordPress 'Responsive 3D Slider' Plugin SQL Injection Vulnerability (CVE-2021-24398)
1011636 - WordPress 'ThinkTwit' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24582)
1009644 - WordPress 'W3 Total Cache' Plugin Arbitrary File Read Vulnerability (CVE-2019-6715)
1011639 - WordPress 'WP-Board' Plugin SQL Injection Vulnerability (CVE-2021-24404)
1011635 - WordPress 'youForms Free For CopeCart' Plugin Cross-Site Scripting Vulnerability (CVE-2021-24596)
Zoho ManageEngine
1011626* - Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability (CVE-2022-40770)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update.