*** NK8 RELS 3452 Release *** Total number of signatures: 3153 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 11 rule(s): --------------- 1135963 WEB October CMS Upload Protection Bypass Code Execution (CVE-2017-1000119) 1135989 WEB vBulletin 5.x pre-auth RCE (CVE-2019-16759) 1136035 WEB Telerik UI For ASP.NET AJAX Encryption Keys Disclosure (CVE-2017-9248) 1136037 WEB Telerik UI For ASP.NET AJAX Arbitrary File Upload 1136039 WEB OpenEMR ajax_download.php Directory Traversal (CVE-2019-14530) 1136042 FILE Microsoft Windows Jet Database CVE-2019-1242 Remote Code Execution 1136044 WEB Webmin 1.920 Unauhenticated Remote Command Execution -2 (CVE-2019-15107) 1136045 WEB File Sharing Wizard - POST SEH Overflow (CVE-2019-16724) 1136048 WEB Wordpress 4.7.0/4.7.1 Unauthenticated Content Injection -1.2 1136050 WEB URI Handler Buffer Overflow - POST -2.2 1136053 WEB Joomla Core Directory Traversal (CVE-2019-10945) Modified 4 rule(s): --------------- 1068221 TUNNEL Wujie/UltraSurf login via SSL -6 1130907 WEB URI Handler Buffer Overflow - POST -2.1 1135923 WEB Webmin 1.920 Unauhenticated Remote Command Execution -1 (CVE-2019-15107) 1136024 WEB Dell EMC Storage Manager EmConfigMigration Servlet Directory Traversal (CVE-2017-14384) Deleted 0 rule(s): ---------------