概要

* は既存ルールの新バージョンを示します。

DPI(Deep Packet Inspection) ルール:

CyberPanel
1012196 - CyberPanel Remote Code Execution Vulnerability (CVE-2024-51567)


Ivanti Endpoint Manager
1012155* - Ivanti Endpoint Manager SQL Injection Vulnerability (CVE-2024-32845)


JetBrains TeamCity
1012199 - JetBrains TeamCity Stored Cross-Site Scripting Vulnerability (CVE-2024-47950)


メールサーバ 共通
1012185 - Roundcube Webmail Information Disclosure Vulnerability (CVE-2024-42010)
1012143 - Roundcube Webmail Stored Cross-Site Scripting Vulnerability (CVE-2024-37383)


PaperCut
1012192 - PaperCut NG and MF Authentication Bypass Vulnerability (CVE-2024-1222)


Ray Framework
1012150* - Ray Command Injection Vulnerability (CVE-2023-6019)


SolarWinds Dameware Web Help Desk
1012127* - SolarWinds Dameware Web Help Desk Multiple Deserialization Remote Code Execution Vulnerabilities (CVE-2024-28986 and CVE-2024-28988)


Webアプリケーション PHP
1012158* - WordPress 'Email Subscribers' Plugin SQL Injection Vulnerability (CVE-2024-2876)
1012106* - WordPress 'Hash Form' Plugin Arbitrary File Upload Vulnerability (CVE-2024-5084)
1012190 - WordPress 'LearnPress' Plugin SQL Injection Vulnerability (CVE-2024-8522)


Webサーバ Adobe ColdFusion
1012140* - Adobe ColdFusion Deserialization Of Untrusted Data Vulnerability (CVE-2024-41874)


Webサーバ HTTPS
1012110* - GeoServer Remote Code Execution Vulnerability (CVE-2024-36401)
1012112* - GitLab Denial Of Service Vulnerability (CVE-2024-2651)


Zoho ManageEngine
1012179 - Zoho ManageEngine Multiple Products SQL Injection Vulnerability (CVE-2024-6748)


変更監視（Integrity Monitoring）ルール:

今回のセキュリティアップデートには、新規の変更監視ルールおよび更新は含まれておりません。


セキュリティログ監視（Log Inspection）ルール:

1002835* - Web Server - Web Access Events