php cve 2017 12933,18-017 (March 27, 2018)
描述
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
DCERPC Services - Client
1008915* - Microsoft Windows SMBv3 Denial Of Service Vulnerability (CVE-2018-0833)
DHCPv6 Server
1008668 - Dnsmasq Information Leak Vulnerability (CVE-2017-14494)
HP Intelligent Management Center (IMC)
1008709* - HPE Intelligent Management Center 'getSelInsBean' Expression Language Injection Vulnerability (CVE-2017-12490)
1008718 - HPE Intelligent Management Center 'userSelectPagingContent' Expression Language Injection Vulnerability (CVE-2017-12521)
1008797* - HPE Operations Orchestration Backwards-Compatibility Beanutils Deserialization Vulnerability (CVE-2017-8994)
1008687* - HPE Operations Orchestration Central-Remoting Insecure Deserialization Vulnerability (CVE-2017-8994)
1008765* - Hewlett Packard Enterprise Intelligent Management Center Language Injection Remote Code Execution Vulnerabilities
HP Network Automation
1008677 - HPE Network Automation PermissionFilter Authentication Bypass Vulnerability (CVE-2017-5812)
HP OpenView
1004786* - HP Data Protector Client EXEC_CMD Perl Remote Code Execution Vulnerability
Mail Client Windows
1001190* - Microsoft Windows Explorer WMF File Denial Of Service.
1001269* - Microsoft Windows Media Format ASF Parsing Remote Code Execution (CVE-2007-0064)
Mail Server Exim
1008940* - Exim Buffer Overflow Remote Code Execution Vulnerability (CVE-2018-6789)
RADIUS Server
1008816 - FreeRADIUS 'rad_coalesce' Out Of Bounds Read Vulnerability (CVE-2017-10979)
Remote Desktop Protocol Server
1007969* - Identified Suspicious Remote Desktop Protocol (RDP) Brute Force Attempt
Suspicious Client Application Activity
1008946 - Heuristic Detection Of Suspicious Digital Certificate
Suspicious Client Ransomware Activity
1007706* - Ransomware Network Traffic - 3
Symantec Messaging Gateway
1008575* - Symantec Messaging Gateway Unauthenticated Remote Code Execution Vulnerability (CVE-2017-6327)
VoIP Smart
1008846* - Digium Asterisk PJSIP Contact Header Denial Of Service Vulnerability (CVE-2017-17850)
VoIP Soft Phones
1006537* - Asterisk Open Source SIP SUBSCRIBE Request Denial Of Service Vulnerability
Web Application Common
1005936* - Identified Local File Inclusion (LFI) Over HTTP
Web Application PHP Based
1008041* - Drupal Coder Module Remote Code Execution Vulnerability
1006386* - PHP 'unserialize()' Integer Overflow Vulnerability (CVE-2014-3669)
1008863 - PHP Openssl Extension PEM Sealing Denial Of Service Vulnerability (CVE-2017-11144)
1008893 - PHP ZIP Signature Verification Out Of Bound Memory Access Vulnerability (CVE-2016-7414)
1008664* - PHP finish_nested_data Function Heap Buffer Overflow Vulnerability (CVE-2017-12933)
Web Client Common
1008886* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB18-02) - 3
1008889* - Adobe Acrobat And Reader Multiple Security Vulnerabilities (APSB18-02) - 4
1007515* - Adobe Flash Player Heap Overflow Vulnerability (CVE-2016-1001)
1008854* - Adobe Flash Player Remote Code Execution Vulnerability (CVE-2018-4878)
1007507* - Adobe Flash Player Use After Free Vulnerability (CVE-2016-0988)
1007014* - Adobe Reader And Acrobat Heap Based Buffer Overflow Vulnerability (CVE-2015-5105)
1008719 - Foxit Reader PDF Parsing Multiple Out Of Bounds Read Information Disclosure Vulnerabilities
1008410* - Microsoft .NET Framework Pointer Verification Vulnerability (CVE-2009-0090)
1008903 - Microsoft Windows EOT Font Engine Information Disclosure Vulnerability (CVE-2018-0761)
1008172* - Microsoft Windows Kernel Elevation Of Privilege Vulnerability (CVE-2017-0050)
1001248* - Microsoft Windows Media Format ASF Parsing Remote Code Execution
1008448* - Microsoft Windows Multiple Elevation Of Privilege Vulnerabilities (June-2017)
1008341* - Microsoft Windows Multiple Security Vulnerabilities (May-2017)
1008521* - Microsoft Windows PDF Remote Code Execution Vulnerability (CVE-2017-0291)
1008892 - PHP ZIP Signature Verification Out Of Bound Memory Access Vulnerability (CVE-2016-7414) - 1
Web Client Internet Explorer/Edge
1004986* - Dell Webcam Central CrazyTalk4 ActiveX Control Buffer Overflow Vulnerability
1007470* - Microsoft Internet Explorer And Edge Memory Corruption Vulnerability (CVE-2016-0105)
1005784* - Microsoft Internet Explorer Information Disclosure Vulnerability (CVE-2013-3908)
1006749* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-1732)
1006750* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-1733)
1006751* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2015-1735)
1008881* - Microsoft Internet Explorer Memory Corruption Vulnerability (CVE-2018-0866)
1008796* - Microsoft Internet Explorer Scripting Engine Information Disclosure Vulnerability (CVE-2017-11906)
Web Client Mozilla Firefox
1008579* - Mozilla Firefox Use-After-Free Vulnerability (CVE-2016-1960)
Web Client SSL
1008528 - Squid Proxy Incorrect X509 Server Certificate Validation Vulnerability (CVE-2015-3455)
Web Server Common
1005434* - Disallow Upload Of A PHP File
1007185* - Java Unserialize Remote Code Execution Vulnerability
Web Server Miscellaneous
1008840* - Apache CouchDB '_config' Command Execution Vulnerability (CVE-2017-12636)
1008751* - Apache CouchDB Remote Code Execution Vulnerabilities (CVE-2017-12635)
1008843* - FasterXML Jackson JSON Library Deserializer Multiple Remote Code Execution Vulnerabilities
1007522* - JBoss Seam Parameterized EL Expressions Remote Code Execution Vulnerability
1002947* - Mambo CMS File Inclusion Vulnerability Scan (CVE-2005-3738)
1008527* - Nginx ngx_http_range_filter_module Integer Overflow Vulnerability (CVE-2017-7529)
1007060* - Red Hat JBoss RichFaces Remote Code Execution Vulnerability (CVE-2015-0279)
Windows Media Service
1004097* - Media Services Stack-based Buffer Overflow Vulnerability
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1003802* - Directory Server – Microsoft Windows Active Directory
php cve 2017 12933,18-017 (March 27, 2018)相关推荐
- 2017第18届深圳国际机械制造工业、金属切割机床、金属成形机床及模具、机器人及工业自动化展会刊(参展商名录)
2017第18届深圳国际机械制造工业展览会 2017深圳国际金属切割机床展览会 2017深圳国际金属成形机床及模具展览会 2017深圳国际机器人及工业自动化展览会会刊(参展商名录) 展会名称: 201 ...
- 2017 年 PHP 社区总结,2018 PHP 发展展望
本文来自作者 Panda 在 GitChat 上分享 「2017 年 PHP 社区总结,2018 PHP 发展展望」,「阅读原文」查看交流实录. 「文末高能」 编辑 | 哈比 一.2017 PHP 社 ...
- 【一周头条盘点】中国软件网(2017.12.18~2017.12.22)
每一个企业级的人 都置顶了 中国软件网 中国软件网 为你带来最新鲜的行业干货 趋势洞察 IBM沈晓卫:担心人工智能对人类的威胁就像担心火星上车牌限号 IBM中国研究院院长沈晓卫认为,从纯粹的技术角度来 ...
- 2017年18岁的北京文科状元父母都是外交官,关于高考,他说出了我们竭力回避的戳心真相
条条大路通罗马, 可是那个孩子, 人家已经在罗马了. 那些真正跑赢同龄人的年轻人, 是拥有见识+知识+格局的结果. 第一段: 这两天看到北京市文科状元接受采访时说的话,觉得一个孩子,简简单单就说出了大 ...
- 2017.02.18 这一周的面试
这一周又参加了几个面试,周二的时候是时速云,周三的时候是mico,周四是有田,周五本来还有一个,但是因为各种原因,没有参加. 这几个面试,除了有田明确的表示已经招到了一个全栈工程师不需要我之外,剩下的 ...
- linux内核安全数据,【漏洞分析】Linux内核XFRM权限提升漏洞分析预警(CVE–2017–16939)...
0x00 背景介绍 2017年11月24日, OSS社区披露了一个由独立安全研究员Mohamed Ghannam发现的一处存在于Linux 内核Netlink socket子系统(XFRM)的漏洞,漏 ...
- 2017.4.18 静态代码分析工具sonarqube+sonar-runner的安装配置及使用
配置成功后的代码分析页面: 可以看到对复杂度.语法使用.重复度等等都做了分析,具体到了每一个方法和每一句代码. 四种使用方式: sonarqube + sonar-runner sonarqube + ...
- 第九天2017/04/18(4、非虚继承、虚继承的本质 / sizeof)
case1:非虚继承 上面是代码的继承图 #include<iostream> using namespace std; //抽象基类:动物类 class CAnimal { public ...
- 第九天2017/04/18(3、重载/覆盖 PK 重写/重定义、父类子类混搭风、抽象类)
1.重载/覆盖 PK 重写/重定义 [预备知识] 函数重载必须在同一个类中发生子类无法重载父类的函数,父类同名的函数将会被名称覆盖重载是在编译期间根据参数类型和个数决定函数调用重载只放在同一个类之中, ...
最新文章
- 深入.NET 4.0之,LazyT点滴
- .net core 1.0 实现负载多服务器单点登录
- 刷脸支付弊端举例_刷脸支付的优势和弊端,你都知道?
- IT人经常围观精品站点推荐
- Windows Subsystem for Linux(WSL)安装emqx
- 枚举类型用法_Mybatis-plus常见用法总结三
- 决策树 随机森林 xgboost_推荐收藏 | 决策树、随机森林、bagging、boosting、Adaboost、GBDT、XGBoost总结...
- Struts2 s:iterator 用法
- AIDL实现不同应用间的通信
- 数组操作--微信小程序学习教程
- PADS 改变图纸和图页边界大小
- Hibernate_02
- java exception 级别_Java异常体系概述
- 单相和三相电源的区别
- 全景视频的格式转换工具
- 微软面试题之数字谜题
- 机器学习、计算机视觉神犇/大牛主页
- java 识别doc、docx
- UNCTF2022-公开赛|Crypto
- django 导出数据到excel表 导出excel表到目标路径及客户端下载
热门文章
- 于是需要把旧的request中的parameter去掉
- ftp服务器部署Tomcat项目,tomcat搭建ftp服务器配置
- showdialog 尝试读取或写入受保护的内存_修改电压和时序,超频上3733,十铨火神3200 16G套装内存评测...
- Qt5开发安卓调试工具(adb input以及adb shell screencap应用)
- 传智python15期_【转载】2018传智播客黑马python人工智能15期视频教程
- 毕设笔记:meshlab
- FDDB,检测自己的数据集的mobilenet,网络模型的详细步骤,留给新手参考
- 毕业设计-基于android的智慧校园系统app的设计与实现
- 软件测试工程师应该如何正确的申请加薪
- Altium Designer元件库官网下载链接