*** EX RELS 03500 Release *** Total number of signatures: 6008 Description ================================================================== In this signature, we addressed the exploits/vulnerabilities and applications as below: Added 6 rule(s): --------------- 1137514 EXPLOIT Veeam ONE Reporter Reporter_ImportLicense Page_Load XML External Entity Injection -1 (CVE-2020-15419) 1137599 EXPLOIT NIPrint LPD-LPR Print Server String Handling Remote Overflow -1 (CVE-2003-1141) 1137600 EXPLOIT NIPrint LPD-LPR Print Server String Handling Remote Overflow -2 (CVE-2003-1141) 1137601 WEB Cacti Group Cacti color.php SQL Injection (CVE-2020-14295) 1137608 EXPLOIT Sonatype Nexus Repository Manager CVE-2019-7238 Expression Language Injection -2 1137610 FILE Windows StructuredQuery Remote Code Execution (CVE-2018-0825) Modified 7 rule(s): --------------- 1068665 MEDIA YouTube access via UDP -3 1135577 WEB Oracle Weblogic 10.3.6.0.0 / 12.1.3.0.0 Remote Code Execution -3 (CVE-2019-2725) 1160201 MEDIA YouTube access via UDP -4 1160636 MEDIA YouTube access via UDP -5 1160909 WEB Google access via UDP -1 1161123 WEB Google Analytics access via UDP -1 1161153 MEDIA YouTube access via UDP -2 Deleted 6 rule(s): --------------- 1131008 EXPLOIT Whitehole Exploit Kit Landing Page Activity (old rule) 1131011 EXPLOIT JDB Exploit Kit Landing Page Activity -1 (old rule) 1133872 SMB SMBLoris Denial of Service Vulnerability (old rule) 1136760 EXPLOIT Memcached try_read_command_binary Stack Buffer Overflow (CVE-2020-10931) (old rule) 1136859 EXPLOIT Pivotal Spring Framework spring-messaging Module STOMP Remote Code Execution -4 (CVE-2018-1270) (old rule) 1136860 EXPLOIT Eclipse Mosquitto message broker Denial of Service (CVE-2018-12543) (old rule)