Description

* indicates a new version of an existing rule

Deep Packet Inspection Rules:

Ivanti Avalanche Remote Control Server
1012215 - Ivanti Avalanche Directory Traversal Vulnerability (CVE-2024-38652)


Ivanti Endpoint Manager
1012214* - Ivanti Endpoint Manager SQL Injection Vulnerabilities (CVE-2024-32847 and CVE-2024-37376)
1012213 - Ivanti Endpoint Manager SQL Injection Vulnerability (CVE-2024-32841)


JetBrains TeamCity
1012238 - JetBrains TeamCity Stored Cross-Site Scripting Vulnerability (CVE-2024-47951)


Mail Server Postfix
1012235 - Zimbra Collaboration Command Injection Vulnerability (CVE-2024-45519)


Trend Micro OfficeScan
1012202 - Trend Micro Apex One SQL Injection Vulnerability (CVE-2024-39753)


Web Application PHP Based
1012180 - WordPress 'Feed Them Social' Plugin Cross-Site Scripting Vulnerability (CVE-2022-2383)
1012225 - WordPress 'LearnPress' Plugin SQL Injection Vulnerability (CVE-2024-8529)
1012146* - WordPress 'Porto' Theme Local File Inclusion Vulnerability (CVE-2024-3806 and CVE-2024-3807)


Web Server Adobe ColdFusion
1012140* - Adobe ColdFusion Deserialization Of Untrusted Data Vulnerability (CVE-2024-41874)


Web Server HTTPS
1012128* - GitLab Denial of Service Vulnerability (CVE-2024-2874)
1012139* - Progress WhatsUp Gold SQL Injection Vulnerability (CVE-2024-6672)
1012233 - WordPress 'FundEngine Donation and Crowdfunding Platform' SQL Injection Vulnerability (CVE-2022-0788)


Integrity Monitoring Rules:

There are no new or updated Integrity Monitoring Rules in this Security Update.


Log Inspection Rules:

There are no new or updated Log Inspection Rules in this Security Update.