概要

* は既存ルールの新バージョンを示します。

DPI(Deep Packet Inspection) ルール:

Advanced Message Queuing Protocol (AMQP)
1012050 - SolarWinds Access Rights Manager Remote Code Execution Vulnerability (CVE-2024-28075)


Webアプリケーション PHP
1011870* - WordPress 'Media Library Assistant' Plugin Remote Code Execution Vulnerability (CVE-2023-4634)
1011695* - WordPress 'Paid Memberships Pro' Plugin SQL Injection Vulnerability (CVE-2023-23488)
1011325* - WordPress 'Perfect Survey' Plugin SQL Injection Vulnerability (CVE-2021-24762)
1011925* - WordPress 'Royal Elementor Addons and Templates' Plugin Unrestricted File Upload Vulnerability (CVE-2023-5360)
1011621* - WordPress 'Snap Creek Duplicator' Plugin Directory Traversal Vulnerability (CVE-2020-11738)
1011168* - WordPress 'Supsystic Ultimate Maps' Plugin Reflected Cross-Site Scripting Vulnerability (CVE-2021-24274)


Webサーバ Adobe ColdFusion
1011558* - Adobe ColdFusion Directory Traversal Vulnerability (CVE-2022-38418)


Webサーバ HTTPS
1012051 - WordPress Core Cross-Site Scripting Vulnerability (CVE-2024-4439)


Webサーバ その他
1012048 - GitLab Cross-Site Scripting Vulnerability (CVE-2024-1451)


変更監視(Integrity Monitoring)ルール:

1003385* - Application - Xorg-x / XFree86 / Xfree86 / Xorg-x11


セキュリティログ監視(Log Inspection)ルール:

1010002* - Microsoft PowerShell Command Execution (ATT&CK T1059.001)