Neueste Nachrichten zu Sicherheitslücken
- * indicates a new version of an existing rule
Deep Packet Inspection Rules:
Database PostgreSQL
1009865 - PostgreSQL Database Password Change Stack Buffer Overflow Vulnerability (CVE-2019-10164)
Microsoft Office
1009909 - Microsoft Word Remote Code Execution Vulnerability (CVE-2019-1201)
Web Client Internet Explorer/Edge
1009904 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1139)
1009905 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1140)
1009906 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1141)
1009907 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1195)
1009903 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1196)
1009908 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1197)
Web Server Oracle
1009345 - Oracle WebLogic Server Java Deserialization Remote Code Execution Vulnerability
Windows SMB Server
1009511* - Microsoft Windows SMB Remote Code Execution Vulnerability (CVE-2019-0630)
Integrity Monitoring Rules:
1009622* - .bash_profile and .bashrc (ATT&CK T1156)
1009629* - AppCert DLLs (ATT&CK T1182)
1009628* - AppInit DLLs (ATT&CK T1103)
1009639* - Application Shimming (ATT&CK T1138)
1009643* - Clear Command History (ATT&CK T1146)
1009895 - Component Object Model Hijacking (ATT&CK T1122, T1112)
1009710* - Install Root Certificate (ATT&CK T1130)
1009745* - Linux - Removable Devices Detected (ATT&CK T1092)
1002859* - Local Security Authority (LSA) Notification/Authentication Packages modified (ATT&CK T1131,T1174)
1002781* - Microsoft Windows - Attributes of a service modified (ATT&CK T1050,T1036)
1005645* - Microsoft Windows - AutoRun Registry Entries Modified (ATT&CK T1013)
1002778* - Microsoft Windows - System .dll or .exe files modified (ATT&CK T1013)
1008257* - Microsoft Windows - USB Storage Device Detected (ATT&CK T1092)
1009638* - NetSh Helper DLL (ATT&CK T1128)
1009704* - Port Monitor (ATT&CK T1013)
1009618* - PowerShell & CommandLine (ATT&CK T1086,T1059)
1009670* - Service Registry Permissions Weakness (ATT&CK T1058)
1006076* - Task Scheduler Entries Modified (ATT&CK T1168)
1009672* - Time Providers (ATT&CK T1209)
1009626* - Windows Accessibility Features - ImageFileExecution (ATT&CK T1015,T1183)
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update. - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services - Client
1004293* - Identified Microsoft Windows Shortcut File Over Network Share
DHCP Failover Protocol Server
1009887 - Microsoft Windows DHCP Server Remote Code Execution Vulnerability (CVE-2019-0785)
Database Oracle
1000840* - Oracle Database Server Generic SQL Injection Detection
HP Intelligent Management Center (IMC)
1009456 - HPE Intelligent Management Center Remote Code Execution Vulnerability (CVE-2017-12525)
RRAS Service
1008769* - Microsoft Windows RRAS Service Remote Code Execution Vulnerability (CVE-2017-11885)
Web Application Common
1009900 - FASTJSON Deserialization Remote Code Execution Vulnerability
1000552* - Generic Cross Site Scripting(XSS) Prevention
Web Application Tomcat
1009713 - Apache Tomcat HTTP/2 Denial Of Service Vulnerability (CVE-2019-0199)
Web Server IIS
1004396* - IIS Repeated Parameter Request Denial Of Service Vulnerability
Web Server IIS HTTPS
1004472* - TLSv1 Denial Of Service Vulnerability
Web Server Oracle
1008317* - Oracle WebLogic JBoss Interceptors Deserialization Of Untrusted Data Vulnerability (CVE-2016-3510)
1008378* - Oracle WebLogic Server Untrusted Data Deserialization Vulnerability (CVE-2017-3248)
1009806 - Oracle Weblogic Server Remote Code Execution Vulnerability (CVE-2019-2647)
1009898 - Oracle Weblogic Server Remote Code Execution Vulnerability (CVE-2019-2648)
1009845 - Oracle Weblogic Server Remote Code Execution Vulnerability (CVE-2019-2650)
Integrity Monitoring Rules:
1006798* - TMTR-0005: Suspicious Files Detected In Application Directories
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update. - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services
1009801 - Microsoft Windows NTLM Elevation Of Privilege Vulnerability (CVE-2019-1040)
DHCPv6 Client - Incoming
1009798* - Microsoft Windows DHCP Client Remote Code Execution Vulnerability (CVE-2019-0698)
Web Application Common
1009711* - GraphicsMagick Heap Buffer Overflow Vulnerability (CVE-2019-11505) - 1
1009580* - Jenkins CI Server Forced Migration Of User Records Vulnerability (CVE-2018-1000863)
1009701* - Jenkins Metaprogramming Remote Code Execution Vulnerability (CVE-2018-1000408)
Web Client Common
1009532* - Microsoft Visual Studio Information Disclosure Vulnerability (CVE-2019-0537)
1009800* - Microsoft Windows SymCrypt Denial-of-Service Vulnerability (CVE-2019-0865)
Web Server Common
1005839* - Identified XML External Entity Injection In HTTP Request
Web Server Miscellaneous
1009804 - Eclipse Jetty HTTP2 SETTINGS Frames Resource Exhaustion Vulnerability (CVE-2018-12545)
Web Server Oracle
1009831* - Oracle WebLogic Arbitrary File Read Vulnerability (CVE-2019-2615)
Integrity Monitoring Rules:
1009628* - AppInit DLLs (ATT&CK: T1103)
1002781* - Microsoft Windows - Attributes of a service modified (ATT&CK T1050, T1036)
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update. - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services
1008647* - Microsoft Windows Search Information Disclosure Vulnerability (CVE-2017-8544)
Microsoft Office
1009853* - Microsoft Excel Remote Code Execution Vulnerability (CVE-2019-1110)
SSL Client Applications
1001113* - SSL/TLS Client (ATT&CK T1032, T1043, T1071)
Web Application Common
1009711 - GraphicsMagick Heap Buffer Overflow Vulnerability (CVE-2019-11505) - 1
1009391 - Identified Redirect Sequence In URI
Web Application PHP Based
1006141* - PHP Fileinfo Denial Of Service Vulnerability (CVE-2014-1943)
Web Client Common
1009748 - Cisco Webex Teams URI Handler Remote Code Execution Vulnerability (CVE-2019-1636)
1009846 - Google Chrome AudioWorkletGlobalScope::Process Use-After-Free Vulnerability
1009712 - GraphicsMagick Heap Buffer Overflow Vulnerability (CVE-2019-11505)
1009823* - Microsoft Windows ActiveX Data Objects (ADO) Remote Code Execution Vulnerability (CVE-2019-0888)
1009760* - Microsoft Windows Jet Database Engine Multiple Remote Code Execution Vulnerabilities (May-2019)
Web Server Apache
1009609* - Apache Subversion 'mod_dav_svn' Denial Of Service Vulnerability (CVE-2018-11803)
Web Server Oracle
1009471* - Oracle WebLogic Server SAML Authentication Bypass Vulnerability (CVE-2018-2998)
1009830* - Oracle Weblogic Server Remote Code Execution Vulnerability (CVE-2019-2649)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update. - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services
1008647 - Microsoft Windows Search Information Disclosure Vulnerability (CVE-2017-8544)
1005293* - Prevent Windows Administrator User Login Over SMB (ATT&CK T1077)
DCERPC Services - Client
1009585 - Microsoft Windows Address Book Insecure Library Loading Vulnerability Over Network Share (CVE-2010-3147)
1009581 - Microsoft Windows Internet Connection Signup Wizard Insecure Library Loading Vulnerability Over Network Share (CVE-2010-3144)
1009587 - Microsoft Windows Media Encoder DLL Loading Arbitrary Code Execution Over Network Share (CVE-2010-3965)
DNS Server
1008658 - Dnsmasq Integer Underflow Vulnerability (CVE-2017-14496)
Microsoft Office
1009853 - Microsoft Excel Remote Code Execution Vulnerability (CVE-2019-1110)
1009854 - Microsoft Excel Remote Code Execution Vulnerability (CVE-2019-1111)
Port Mapper FTP Client
1009558* - Remote File Copy Over FTP (ATT&CK T1105)
SSL Client Applications
1001113* - SSL/TLS Client (ATT&CK T1032)
Web Application Common
1009761* - Microsoft Exchange Memory Corruption Vulnerability (CVE-2018-8302)
Web Client Common
1009851 - Microsoft DirectWrite Information Disclosure Vulnerability (CVE-2019-1093)
1009852 - Microsoft DirectWrite Information Disclosure Vulnerability (CVE-2019-1097)
1009855 - Microsoft GDI Remote Code Execution Vulnerability (CVE-2019-1102)
1009590 - Microsoft Windows Address Book Insecure Library Loading Vulnerability Over WebDav (CVE-2010-3147)
1009847 - Microsoft Windows Event Viewer Information Disclosure Vulnerability (CVE-2019-0948)
1009856 - Microsoft Windows GDI Information Disclosure Vulnerability (CVE-2019-1094)
1009857 - Microsoft Windows GDI Information Disclosure Vulnerability (CVE-2019-1095)
1009858 - Microsoft Windows GDI Information Disclosure Vulnerability (CVE-2019-1098)
1009859 - Microsoft Windows GDI Information Disclosure Vulnerability (CVE-2019-1099)
1009860 - Microsoft Windows GDI Information Disclosure Vulnerability (CVE-2019-1100)
1009861 - Microsoft Windows GDI Information Disclosure Vulnerability (CVE-2019-1101)
1009862 - Microsoft Windows GDI Information Disclosure Vulnerability (CVE-2019-1116)
1009589 - Microsoft Windows Internet Connection Signup Wizard Insecure Library Loading Vulnerability Over WebDav (CVE-2010-3144)
1009592 - Microsoft Windows Media Encoder DLL Loading Arbitrary Code Execution Over WebDav (CVE-2010-3965)
Web Client VNC
1009494* - LibVNC LibVNCClient CoRRE Heap-based Buffer Overflow Vulnerability (CVE-2018-20020)
Web Server Apache
1009609 - Apache Subversion 'mod_dav_svn' Denial Of Service Vulnerability (CVE-2018-11803)
Web Server Oracle
1009471 - Oracle WebLogic Server SAML Authentication Bypass Vulnerability (CVE-2018-2998)
1009830 - Oracle Weblogic Server Remote Code Execution Vulnerability (CVE-2019-2649)
Windows Services RPC Server DCERPC
1009480* - Identified WMI Query Over DCE/RPC Protocol (ATT&CK T1005)
1007054* - Remote Schedule Task 'Create' Through SMBv2 Protocol Detected (ATT&CK T1053)
Integrity Monitoring Rules:
1009745 - Linux - Removable Devices Detected (ATT&CK: T1092)
1002781* - Microsoft Windows - Attributes of a service modified (ATT&CK T1050)
1005645 - Microsoft Windows - AutoRun Registry Entries Modified (ATT&CK: T1013)
1002776* - Microsoft Windows - Startup Programs Modified (ATT&CK T1112)
1002778* - Microsoft Windows - System .dll or .exe files modified (ATT&CK: T1013)
1009618 - PowerShell & CommandLine (ATT&CK: T1086 & T1059)
1006805* - TMTR-0009: Suspicious Files Detected In System Folder
1006804* - TMTR-0010: Suspicious Files Detected In System Folder
1006677* - TMTR-0013: Suspicious Files Detected In Windows Folder
1006684* - TMTR-0015: Suspicious Service Detected
1007216* - TMTR-0021: Suspicious Files Detected In System Drive
1008720* - Users and Groups - Create and Delete Activity (ATT&CK T1136)
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update. - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services - Client
1009586 - Microsoft Internet Explorer DLL Loading Arbitrary Code Execution Vulnerability Over Network Share (CVE-2011-0038)
1009588 - Microsoft Office Insecure Library Loading Vulnerability Over Network Share (CVE-2010-3337)
DHCPv6 Client - Incoming
1009798 - Microsoft Windows DHCP Client Remote Code Execution Vulnerability (CVE-2019-0698)
HP Intelligent Management Center (IMC)
1009799* - HPE Intelligent Management Center 'AccessMgrServlet ClassName' Insecure Deserialization (CVE-2019-11945)
Microsoft Office
1009835 - Microsoft Excel Information Disclosure Vulnerability (CVE-2019-1112)
Web Application Common
1009630* - DotNetNuke Remote Code Execution Vulnerability (CVE-2017-9822)
1009580 - Jenkins CI Server Forced Migration Of User Records Vulnerability (CVE-2018-1000863)
1009701 - Jenkins Metaprogramming Remote Code Execution Vulnerability (CVE-2018-1000408)
Web Client Common
1009832 - Google Chrome JS Execution Use-After-Free Vulnerability
1009593 - Microsoft Internet Explorer DLL Loading Arbitrary Code Execution Vulnerability Over WebDav (CVE-2011-0038)
1009591 - Microsoft Office Insecure Library Loading Vulnerability Over WebDav (CVE-2010-3337)
1009532 - Microsoft Visual Studio Information Disclosure Vulnerability (CVE-2019-0537)
Web Client Internet Explorer/Edge
1009843 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1062)
1009842 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1092)
1009840 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1103)
1009841 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1106)
1009834 - Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CVE-2019-1107)
1009838 - Microsoft Internet Explorer And Edge Memory Corruption Vulnerability (CVE-2019-1104)
1009839 - Microsoft Internet Explorer And Edge Scripting Engine Memory Corruption Vulnerability (CVE-2019-1001)
1009836 - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2019-1063)
1009837 - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2019-1004)
Web Server Oracle
1009831 - Oracle WebLogic Arbitrary File Read Vulnerability (CVE-2019-2615)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update. - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
HP Intelligent Management Center (IMC)
1008797 - HPE Operations Orchestration Backwards-Compatibility Beanutils Deserialization Vulnerability (CVE-2017-8994)
1008687 - HPE Operations Orchestration Central-Remoting Insecure Deserialization Vulnerability (CVE-2017-8994)
Symantec Messaging Gateway
1008575 - Symantec Messaging Gateway Unauthenticated Remote Code Execution Vulnerability (CVE-2017-6327)
Web Application Common
1005934* - Identified Suspicious Command Injection Attack
Web Application PHP Based
1008516* - PHP Buffer Over-Read Into Uninitialized Memory Vulnerability (CVE-2017-7890)
Web Client Common
1008855 - Foxit Reader And PhantonPDF XFA 'gotoURL' Command Injection Vulnerability (CVE-2017-10953)
1008832 - Foxit Reader Multiple Security Vulnerabilities
1008837 - Foxit Reader Multiple XFA Type Confusion Remote Code Execution Vulnerabilities
1008834 - Foxit Reader Remote Code Execution Vulnerabilities
1008835 - Foxit Reader Use-After-Free Remote Code Execution Vulnerabilities
1008755 - Google Chrome WebGL 2 ReadPixels Heap Buffer Overflow (CVE-2017-5112)
1004317* - Identified Malicious PDF Document - 5
1004933* - Identified Malicious PDF Document - 8
1008943 - Microsoft Windows EOT Font Engine Information Disclosure Vulnerability (CVE-2018-0760)
1008521* - Microsoft Windows PDF Remote Code Execution Vulnerability (CVE-2017-0291)
Web Client Internet Explorer/Edge
1008851 - Microsoft Internet Explorer And Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0772)
1008796 - Microsoft Internet Explorer Scripting Engine Information Disclosure Vulnerability (CVE-2017-11906)
1008639* - Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability (CVE-2017-11810)
Web Server Miscellaneous
1003927* - HP Power Manager formExportDataLogs Directory Traversal
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update. - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services - Client
1008915* - Microsoft Windows SMBv3 Denial Of Service Vulnerability (CVE-2018-0833)
DHCPv6 Server
1008668 - Dnsmasq Information Leak Vulnerability (CVE-2017-14494)
HP Intelligent Management Center (IMC)
1008709* - HPE Intelligent Management Center 'getSelInsBean' Expression Language Injection Vulnerability (CVE-2017-12490)
1008718 - HPE Intelligent Management Center 'userSelectPagingContent' Expression Language Injection Vulnerability (CVE-2017-12521)
1008797* - HPE Operations Orchestration Backwards-Compatibility Beanutils Deserialization Vulnerability (CVE-2017-8994)
1008687* - HPE Operations Orchestration Central-Remoting Insecure Deserialization Vulnerability (CVE-2017-8994)
1008765* - Hewlett Packard Enterprise Intelligent Management Center Language Injection Remote Code Execution Vulnerabilities
HP Network Automation
1008677 - HPE Network Automation PermissionFilter Authentication Bypass Vulnerability (CVE-2017-5812)
HP OpenView
1004786* - HP Data Protector Client EXEC_CMD Perl Remote Code Execution Vulnerability
Mail Client Windows
1001190* - Microsoft Windows Explorer WMF File Denial Of Service.
1001269* - Microsoft Windows Media Format ASF Parsing Remote Code Execution (CVE-2007-0064)
Mail Server Exim
1008940* - Exim Buffer Overflow Remote Code Execution Vulnerability (CVE-2018-6789)
RADIUS Server
1008816 - FreeRADIUS 'rad_coalesce' Out Of Bounds Read Vulnerability (CVE-2017-10979)
Remote Desktop Protocol Server
1007969* - Identified Suspicious Remote Desktop Protocol (RDP) Brute Force Attempt
Suspicious Client Application Activity
1008946 - Heuristic Detection Of Suspicious Digital Certificate
Suspicious Client Ransomware Activity
1007706* - Ransomware Network Traffic - 3
Symantec Messaging Gateway
1008575* - Symantec Messaging Gateway Unauthenticated Remote Code Execution Vulnerability (CVE-2017-6327)
VoIP Smart
1008846* - Digium Asterisk PJSIP Contact Header Denial Of Service Vulnerability (CVE-2017-17850)
VoIP Soft Phones
1006537* - Asterisk Open Source SIP SUBSCRIBE Request Denial Of Service Vulnerability
Web Application Common
1005936* - Identified Local File Inclusion (LFI) Over HTTP
Web Application PHP Based
1008041* - Drupal Coder Module Remote Code Execution Vulnerability
1006386* - PHP 'unserialize()' Integer Overflow Vulnerability (CVE-2014-3669)
1008863 - PHP Openssl Extension PEM Sealing Denial Of Service Vulnerability (CVE-2017-11144)
1008893 - PHP ZIP Signature Verification Out Of Bound Memory Access Vulnerability (CVE-2016-7414)
1008664* - PHP finish_nested_data Function Heap Buffer Overflow Vulnerability (CVE-2017-12933)
Web Client Common
1008886* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB18-02) - 3
1008889* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB18-02) - 4
1007515* - Adobe Flash Player Heap Overflow Vulnerability (CVE-2016-1001)
1008854* - Adobe Flash Player Remote Code Execution Vulnerability (CVE-2018-4878)
1007507* - Adobe Flash Player Use After Free Vulnerability (CVE-2016-0988)
1007014* - Adobe Reader And Acrobat Heap Based Buffer Overflow Vulnerability (CVE-2015-5105)
1008719 - Foxit Reader PDF Parsing Multiple Out Of Bounds Read Information Disclosure Vulnerabilities
1008410* - Microsoft .NET Framework Pointer Verification Vulnerability (CVE-2009-0090)
1008903 - Microsoft Windows EOT Font Engine Information Disclosure Vulnerability (CVE-2018-0761)
1008172* - Microsoft Windows Kernel Elevation Of Privilege Vulnerability (CVE-2017-0050)
1001248* - Microsoft Windows Media Format ASF Parsing Remote Code Execution
1008448* - Microsoft Windows Multiple Elevation Of Privilege Vulnerabilities (June-2017)
1008341* - Microsoft Windows Multiple Security Vulnerabilities (May-2017)
1008521* - Microsoft Windows PDF Remote Code Execution Vulnerability (CVE-2017-0291)
1008892 - PHP ZIP Signature Verification Out Of Bound Memory Access Vulnerability (CVE-2016-7414) - 1
Web Client Internet Explorer/Edge
1004986* - Dell Webcam Central CrazyTalk4 ActiveX Control Buffer Overflow Vulnerability
1007470* - Microsoft Internet Explorer And Edge Memory Corruption Vulnerability (CVE-2016-0105)
1005784* - Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2013-3908)
1006749* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-1732)
1006750* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-1733)
1006751* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-1735)
1008881* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2018-0866)
1008796* - Microsoft Internet Explorer Scripting Engine Information Disclosure Vulnerability (CVE-2017-11906)
Web Client Mozilla Firefox
1008579* - Mozilla Firefox Use-After-Free Vulnerability (CVE-2016-1960)
Web Client SSL
1008528 - Squid Proxy Incorrect X509 Server Certificate Validation Vulnerability (CVE-2015-3455)
Web Server Common
1005434* - Disallow Upload Of A PHP File
1007185* - Java Unserialize Remote Code Execution Vulnerability
Web Server Miscellaneous
1008840* - Apache CouchDB '_config' Command Execution Vulnerability (CVE-2017-12636)
1008751* - Apache CouchDB Remote Code Execution Vulnerabilities (CVE-2017-12635)
1008843* - FasterXML Jackson JSON Library Deserializer Multiple Remote Code Execution Vulnerabilities
1007522* - JBoss Seam Parameterized EL Expressions Remote Code Execution Vulnerability
1002947* - Mambo CMS File Inclusion Vulnerability Scan (CVE-2005-3738)
1008527* - Nginx ngx_http_range_filter_module Integer Overflow Vulnerability (CVE-2017-7529)
1007060* - Red Hat JBoss RichFaces Remote Code Execution Vulnerability (CVE-2015-0279)
Windows Media Service
1004097* - Media Services Stack-based Buffer Overflow Vulnerability
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1003802* - Directory Server – Microsoft Windows Active Directory - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
Web Application PHP Based
1008970 - Drupal Core Remote Code Execution Vulnerability (CVE-2018-7600)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
There are no new or updated Log Inspection Rules in this Security Update. - * indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services
1008445* - Microsoft Windows Search Remote Code Execution Vulnerability (CVE-2017-8543)
Database Microsoft SQL
1008759 - Microsoft SQL Server 'EXECUTE AS' Privilege Escalation Vulnerability
HP Intelligent Management Center (IMC)
1008905 - HPE Intelligent Management Center 'UrlAccessController' Authentication Bypass Vulnerability (CVE-2017-8982)
HP Intelligent Management Center Dbman
1008909 - HPE Intelligent Management Center 'dbman' Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2017-8981)
Mail Client Windows
1002444* - Novell GroupWise Client mailto: Scheme Buffer Overflow
OpenSSL
1008268 - OpenSSL ChaCha20/Poly1305 Buffer Overflow Vulnerability (CVE-2017-3731)
1008810 - OpenSSL Invalid PSS Parameters Segmentation Fault Vulnerability (CVE-2015-0208)
SSL/TLS Server
1008662 - Microsoft Windows SChannel Spoofing Vulnerability (CVE-2009-0085)
Trend Micro OfficeScan
1008811 - Trend Micro OfficeScan Memory Corruption Vulnerability (CVE-2017-14089)
VoIP Smart
1008844 - Asterisk 'cdr_object_update_party_b_userfield_cb' Buffer Overflow Vulnerability (CVE-2017-16671)
VoIP Soft Phones
1008654 - Digium Asterisk app_minivm Caller-ID Command Execution Vulnerability (CVE-2017-14100)
Web Application Common
1005934* - Identified Suspicious Command Injection Attack
Web Application PHP Based
1008970* - Drupal Core Remote Code Execution Vulnerability (CVE-2018-7600)
1008919 - PHP 'var_unserializer.c' Buffer Overflow Vulnerability (CVE-2016-10161)
1008665 - PHP Heap Based Buffer Overflow Vulnerability (CVE-2017-12932)
1008904 - PHP Unserialize Use After Free Vulnerability (CVE-2016-9138)
Web Client Common
1008883* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB18-02) - 2
1008885* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB18-02) - 5
1008809 - Google Chrome V8 Crankshaft Type Confusion Vulnerability (CVE-2017-5070)
1008908 - Microsoft Windows EOT Font Engine Information Disclosure Vulnerability (CVE-2018-0755)
1008633 - Microsoft Windows GDI Information Disclosure Vulnerability (CVE-2017-8676)
Web Client Internet Explorer/Edge
1008807 - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-11839)
1008868* - Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2018-0835)
1005284* - Microsoft Internet Explorer Mouse Tracking Vulnerability
Web Server IIS
1003671* - Microsoft ASP.NET Remote Unauthenticated Denial Of Service Vulnerability (CVE-2009-1536)
Web Server Miscellaneous
1008674* - IBM Informix Open Admin Tool Remote Code Execution Vulnerability (CVE-2017-1092)
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1008670* - Microsoft Windows Security Events - 3