OWASP ๅฎ็พฉ่ๆฌ่ฃไธ็บใไธๅฑคๅฎๅ จๆฟ็ญๅท่กๆฉๅถ๏ผ่ฝ้ฒๆญขๅทฒ็ฅๆผๆด้ญๅฐๅฉ็จใใCato ้้ Cato ๅฎไธ้้้ฒๅผๆ๏ผSPACE๏ผไธญ็ๅ ฅไพต้ฒ็ฆฆ็ณป็ตฑๅฑค้ฒ่ก่ๆฌ่ฃไธ่็ใCato ็ๅฐๅฎถๆ้จ็ฝฒๆฐ็ IPS ่ฆๅ๏ผๅพ่ๅฟซ้้ฉๆๆฐ็ CVE๏ผ่็ก้ๅฎขๆถ็ๅ่ใ
Name
CVE
Severity Score
Detect to Protect
Description
CVE-2024-9474 ๆฏ PAN-OS ่ฃ็ฝฎ็ฎก็็ถฒ้ ไป้ขไธญ็ๆฌ้ๆๅๆผๆดใๆช็ถ่บซไปฝ้ฉ่ญ็้ ็ซฏๆปๆ่ ๏ผๅฏไปฅๅฐ CVE-2024-0012 ๅ CVE-2024-9474 ๆผๆดไธฒ่ฏ่ตทไพ๏ผๅพ่ๅจๆๅๆปๆ็ PAN-OS ่ฃ็ฝฎไธ็ฒๅพ root ๆฌ้ไธฆๅท่กๆไปคใ
Detection
2024 ๅนด 11 ๆ 18 ๆฅ
Opt-in Protection
0 * ็ฑๆผ้็จ็ฐฝๅ
Global Protection
0 * ็ฑๆผ้็จ็ฐฝๅ
Name
CVE
Severity Score
Detect to Protect
Description
SolarWinds SERV-U ็ฎ้้ๆญทๅ ่จฑๅญๅไธฆ่ฎๅไธปๆฉไธ็ๆๆๆชๆกใ
Detection
2024 ๅนด 6 ๆ 7 ๆฅ ไธๅ 11:00
Opt-in Protection
0 * ็ฑๆผ้็จ็ฐฝๅ
Global Protection
0 * ็ฑๆผ้็จ็ฐฝๅ
Name
CVE
Severity Score
Detect to Protect
Description
ConnectWise ScreenConnect 23.9.7 ๅไนๅ็็ๆฌๅญๅจไธๅ่ช่ญ็น้ๆผๆด๏ผๆปๆ่ ๅฏไปฅ้้ๆฟไปฃ่ทฏๅพๆ้้็น้่ช่ญ๏ผ้ฒ่็ดๆฅๅญๅๆฉๅฏ่ณ่จๆ้้ต็ณป็ตฑใ
Detection
2024 ๅนด 2 ๆ 21 ๆฅ
Opt-in Protection
2024 ๅนด 2 ๆ 23 ๆฅ ไธๅ 10:45 UTC
Global Protection
2024 ๅนด 2 ๆ 25 ๆฅ ไธๅ 9:00 UTC
Name
CVE
Severity Score
Detect to Protect
Description
Jenkins 2.441 ๅไนๅ็ๆฌ๏ผไปฅๅ LTS 2.426.2 ๅไนๅ็ๆฌ๏ผๆช็ฆ็จๅ ถ CLI ๅฝไปค่งฃๆๅจไธญ็ไธๅๅ่ฝ๏ผ่ฉฒๅ่ฝๆๅฐๅๆธไธญ็ '@' ๅญ็ฌฆๅๅ ถๅพ็ๆชๆก่ทฏๅพๆฟๆ็บๆชๆก็ๅ งๅฎน๏ผไฝฟๆช็ถ่ช่ญ็ๆปๆ่ ่ฝๅค ่ฎๅ Jenkins ไผบๆๅจๆชๆก็ณป็ตฑไธญ็ไปปๆๆชๆกใ
Detection
2024 ๅนด 1 ๆ 27 ๆฅ
Opt-in Protection
2024 ๅนด 1 ๆ 28 ๆฅ ไธๅ 9:50
Global Protection
2024 ๅนด 1 ๆ 29 ๆฅ ไธๅ 5:30
Name
CVE
Severity Score
Detect to Protect
Description
Atlassian Confluence ไผบๆๅจ่่ณๆไธญๅฟๅญๅจไธๅ้ ็ซฏ็จๅผ็ขผๅท่กๆผๆด๏ผๆช็ถ่บซไปฝ้ฉ่ญ็ๆปๆ่ ๅฏ้้ๆจกๆฟๆณจๅ ฅ็ฒๅพ้ ็ซฏ็จๅผ็ขผๅท่ก็ๆฌ้ใ
Detection
2024 ๅนด 1 ๆ 22 ๆฅ
Opt-in Protection
2024 ๅนด 1 ๆ 22 ๆฅ ไธๅ 7:00 UTC
Global Protection
2024 ๅนด 1 ๆ 23 ๆฅ ไธๅ 11:00 UTC
Name
CVE
Severity Score
Detect to Protect
Description
้้ Apache Struts 2 ็ถฒ้ ๆกๆถไธญ็ๆชๆกไธๅณ้่ผฏๆผๆด๏ผๆปๆ่ ๅฏ้ฒ่กไปปๆๆชๆกไธๅณไธฆๅท่ก็จๅผ็ขผ
Detection
POC ๅฏ็จ โ 2023 ๅนด 12 ๆ 12 ๆฅ
Opt-in Protection
2023 ๅนด 12 ๆ 12 ๆฅ
Global Protection
2023 ๅนด 12 ๆ 13 ๆฅ
Name
CVE
Severity Score
Detect to Protect
Description
้ๅฐ็ถฒ้็ถฒ่ทฏ็ๆ็ง่จญๅไธญ๏ผ่ฅ้่ก IOS XE ไธๅ็จไบ HTTP ็ถฒ้ ไป้ขๅ่ฝ๏ผๅๅฏ่ฝ็ผ็ๆฌ้ๆๅๆผๆด
Detection
POC ๅฏ็จ – 2023 ๅนด 10 ๆ 30 ๆฅ 20:30 UTC
Opt-in Protection
2023 ๅนด 10 ๆ 31 ๆฅ 20:00 UTC
Global Protection
2023 ๅนด 11 ๆ 1 ๆฅ 20:00 UTC
Name
CVE
Severity Score
Detect to Protect
Description
ๅจ SOCKS5 ไปฃ็ไผบๆๅจ้ฃ็ทๅๅ้็จไธญ๏ผไธปๆฉๅ็จฑ่งฃๆ็ๅ ็็ทฉ่กๅๆบขไฝๆผๆดๅฏ่ฝๅฐ่ดๅจๆๅๆปๆ็ libcurl ๅฏฆไฝไธญๅท่กๆกๆ็จๅผ็ขผ
Detection
2023 ๅนด 10 ๆ 11 ๆฅ 6:30 UTC
Opt-in Protection
2023 ๅนด 10 ๆ 11 ๆฅ 20:00 UTC
Global Protection
2023 ๅนด 10 ๆ 12 ๆฅ 9:30 UTC
Name
CVE
Severity Score
Detect to Protect
Description
Atlassian Confluence Server ่ Data Center ๆฌๅฐ็ๆฌ็ๆฌ้ๆๅๆผๆด๏ผๆปๆ่ ๅฏไปฅๅฉ็จๆๅๆปๆ็็ต็ซฏ่ฃ็ฝฎ๏ผๅตๅปบๆช็ถๆๆฌ็็ฎก็ๅกๅธณๆถไธฆ็ฒๅไผบๆๅจๅญๅๆฌ้
Detection
2023 ๅนด 10 ๆ 4 ๆฅ 13:00 UTC
Opt-in Protection
2023 ๅนด 10 ๆ 5 ๆฅ 11:00 UTC
Global Protection
2023 ๅนด 10 ๆ 6 ๆฅ 12:00 UTC
Name
CVE
Severity Score
Detect to Protect
Description
InProgress ็็ฎก็ๆชๆกๅณ่ผธ (MFT) ่งฃๆฑบๆนๆก MOVEit Transfer ๅญๅจ SQL ๆณจๅ ฅๆผๆด๏ผๆปๆ่ ๅฏๅท่ก SQL ๅฝไปค๏ผไธฆๅฏ่ฝๅฐ่ดๅฎ่ฃๅฐ็จๅพ้๏ผ้ฒ่ๅฏฆ็พ้ ็ซฏ็จๅผ็ขผๅท่กใ
Detection
2023 ๅนด 6 ๆ 6 ๆฅ ไธๅ 8:00
Opt-in Protection
2023 ๅนด 6 ๆ 8 ๆฅ ไธๅ 4:30
Global Protection
2023 ๅนด 6 ๆ 9 ๆฅ ไธๅ 2:00
Name
CVE
Severity Score
Detect to Protect
Description
Microsoft Outlook ๆๅๆฌ้ๆผๆด * ๅจ้ถๆ้ป๏ผCato ็้ฒ็ซ็้ ่จญๆๅฐ้ๅค้จ็ SMB ๆต้
Detection
2023 ๅนด 3 ๆ 3 ๆฅ ไธๅ 8:02
Opt-in Protection
2023 ๅนด 3 ๆ 3 ๆฅ ไธๅ 8:02
Global Protection
2023 ๅนด 3 ๆ 3 ๆฅ ไธๅ 8:02
Name
CVE
Severity Score
Detect to Protect
Description
ไฝ็บ ProxyNotShell ๆปๆ้็ไธ้จๅ๏ผๆไบ็ๆฌ็ MS Exchange ๅญๅจ RCE๏ผ้ ็ซฏ็จๅผ็ขผๅท่ก๏ผ
Detection
2022 ๅนด 12 ๆ 21 ๆฅ ไธๅ 5:00
Opt-in Protection
2022 ๅนด 12 ๆ 21 ๆฅ ไธๅ 11:29
Global Protection
2022 ๅนด 12 ๆ 22 ๆฅ ไธๅ 4:45
Name
CVE
Severity Score
Detect to Protect
Description
Microsoft Outlook ๆๅๆฌ้ๆผๆด
Detection
2022 ๅนด 9 ๆ 30 ๆฅ ไธๅ 1:19
Opt-in Protection
2022 ๅนด 9 ๆ 30 ๆฅ ไธๅ 11:25
Global Protection
2022 ๅนด 10 ๆ 2 ๆฅ ไธๅ 12:40
Name
CVE
Severity Score
Detect to Protect
Description
ๅพฎ่ป Windows ๆฏๆด่จบๆทๅทฅๅ ท (MSDT) ้ ็ซฏ็จๅผ็ขผๅท่กๆผๆด
Detection
2022 ๅนด 8 ๆ 10 ๆฅ ไธๅ 11:22
Opt-in Protection
2022 ๅนด 8 ๆ 11 ๆฅ ไธๅ 6:38
Global Protection
2022 ๅนด 8 ๆ 12 ๆฅ ไธๅ 4:16
Name
CVE
Severity Score
Detect to Protect
Description
Apache Spark ไฝฟ็จ่ ไป้ขๆไพไบ้้่จญๅฎ้ธ้ spark.acls.enable ๅ็จ ACLs ็ๅ่ฝใ้้้ฉ่ญ็ฏฉ้ธๅจ๏ผ็ณป็ตฑๆๆชขๆฅ็จๆถๆฏๅฆๅ ทๅๆฅ็ๆไฟฎๆนๆ็จ็จๅผ็ๅญๅๆฌ้ใๅฆๆๅ็จไบ ACLs ๅ HttpSecurityFilter ไธญ็ๆไบ็จๅผ็ขผ่ทฏๅพๅฏ่ฝๆ่ฎๆปๆ่ ้้ๆไพไปปๆ็ไฝฟ็จ่ ๅ็จฑ้ฒ่กๅๅ ใๆกๆ็จๆถๅฏ่ฝๆๅฉ็จๆญคๆผๆด๏ผ้ฒ่่งธ็ผไธๅๆฌ้ๆชขๆฅๅ่ฝ๏ผ่ฉฒๅ่ฝๆ็ตๆๆ นๆ็จๆถ็่ผธๅ ฅๅปบ็ซไธๆข Unix Shell ๆไปคไธฆๅท่กใ้ๅฐๅฐ่ดไปฅ็ฎๅ Spark ๅท่กไฝฟ็จ่ ็่บซไปฝๅท่กไปปๆ็ Shell ๆไปค
Detection
2022 ๅนด 7 ๆ 19 ๆฅ ไธๅ 10:06
Opt-in Protection
2022 ๅนด 7 ๆ 19 ๆฅ ไธๅ 7:25
Global Protection
2022 ๅนด 7 ๆ 20 ๆฅ ไธๅ 5:23
Name
CVE
Severity Score
Detect to Protect
Description
ๅพฎ่ป Windows ๆฏๆด่จบๆทๅทฅๅ ท (MSDT) ้ ็ซฏ็จๅผ็ขผๅท่กๆผๆดใ
Detection
2022 ๅนด 5 ๆ 31 ๆฅ ไธๅ 8:43
Opt-in Protection
2022 ๅนด 5 ๆ 31 ๆฅ ไธๅ 10:06
Global Protection
2022 ๅนด 6 ๆ 1 ๆฅ ไธๅ 5:00
Name
CVE
Severity Score
Detect to Protect
Description
ๅจ Spring Cloud Function ็ๆฌ 3.1.6ใ3.2.2 ๅ่ผ่็ๆชๆฏๆด็ๆฌไธญ๏ผ็ถไฝฟ็จ่ทฏ็ฑๅ่ฝๆ๏ผๆปๆ่ ๅฏไปฅๆไพ็น่ฃฝ็ SpEL ไฝ็บ่ทฏ็ฑ่กจ้ๅผ๏ผ้ๅฏ่ฝๅฐ่ด้ ็ซฏ็จๅผ็ขผๅท่กไธฆๅญๅๆฌๅฐ่ณๆบ
Detection
2022 ๅนด 3 ๆ 30 ๆฅ ไธๅ 6:00
Opt-in Protection
2022 ๅนด 3 ๆ 30 ๆฅ ไธๅ 11:09
Global Protection
2022 ๅนด 4 ๆ 1 ๆฅ ไธๅ 7:54
Name
CVE
Severity Score
Detect to Protect
Description
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled
Detection
Dec 10th, 2021 at 8:45 PM
Opt-in Protection
December 11, 2021 at 3:16 AM
Global Protection
December 11, 2021 at 1:47 PM
Name
CVE
Severity Score
Detect to Protect
Description
A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default configuration "require all denied", these requests can succeed. If CGI scripts are also enabled for these aliased pathes, this could allow for remote code execution
Detection
Oct 6th, 2021 at 7:19 AM
Opt-in Protection
October 7, 2021 at 2:01 PM
Global Protection
October 8, 2021 at 12:05 AM
Name
CVE
Severity Score
Detect to Protect
Name
CVE
Severity Score
Detect to Protect
Description
The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Server may exploit this issue to execute code on vCenter Server by uploading a specially crafted file
Detection
Sep 23rd, 2021 at 8:36 AM
Opt-in Protection
September 23, 2021 at 6:23 PM
Global Protection
September 26, 2021 at 6:37 PM
Name
CVE
Severity Score
Detect to Protect
Description
Windows Print Spooler Elevation of Privilege Vulnerability
Detection
Jul 5th, 2021 at 12:16 PM
Opt-in Protection
July 11, 2021 at 10:52 AM
Global Protection
July 11, 2021 at 6:44 PM
Name
CVE
Severity Score
Detect to Protect
Description
The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enabled by default in vCenter Server. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server
Detection
May 31, 2021 at 10:55 AM
Opt-in Protection
June 1, 2021 at 9:47 PM
Global Protection
June 3, 2021 at 10:24 PM
Name
CVE
Severity Score
Detect to Protect
Description
On specific versions of BIG-IP and BIG-IQ , the iControl REST interface has an unauthenticated remote command execution vulnerability
Detection
Mar 20th, 2021 at 11:43ย PM
Opt-in Protection
Mar 23rd, 2021 at 12:12ย PM
Global Protection
March 23, 2021 at 7:21 PM
Name
CVE
Severity Score
Detect to Protect
Description
Microsoft Exchange Server Remote Code Execution Vulnerability
Detection
March 3, 2021 at 11:03 AM
Opt-in Protection
March 4, 2021 at 10:48 PM
Global Protection
March 7, 2021 at 1:26 PM
Name
CVE
Severity Score
Detect to Protect
Description
The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server.
Detection
February 25, 2021 at 10:06 AM
Opt-in Protection
February 25, 2021 at 7:16 PM
Global Protection
February 26, 2021 at 12:03 PM
ๅฎขๆถ็ถๅธธๅจไฟ่ญท็ถฒ็ตกๅ ๅๆฐ่ CVE ๅจ่ ๆ๏ผๅจ้็จใ่ณๆบๅๆ้ไธ้ๅฐๅฐ้ฃใๅๅ ๅฆไธ๏ผ
ไพๆๅๅฟ ้ ้ๅฐ่ฉฒ CVE ้ฒ่ก็ ็ฉถไธฆ้็ผ็ธๆ็็นๅพต็ขผ
ๅฎขๆถ้่ฆๅจ็ถญ่ญท็ชๅฃๅ งๆธฌ่ฉฆ่ฉฒ็นๅพต็ขผ
ๅฎขๆถๆธฌ่ฉฆๅฟ ้ ็ขบไฟ่ฉฒ็นๅพต็ขผไธๆไธญๆทๆต้ใ้ไฝๆชขๆธฌๆ่ฝๆๅฝฑ้ฟ็จๆถ้ซ้ฉ
็นๅพต็ขผๅชๆๅจๆธฌ่ฉฆๆๅๅพๆ่ฝๅ็จ
้้ ้ซๅบฆ่่ฒป่ณๆบ็้็จ๏ผไฝฟ่จฑๅคๅฎขๆถไธๅพไธๅฐๅ ฅไพต้ฒ็ฆฆ็ณป็ตฑ (IPS) ๅๆ่ณๅตๆธฌๆจกๅผ๏ผๆ้ฃไปฅ็ถญๆๆไฝณ็ๅฎๅ จ้ฒ่ญท็ๆ ใ้ๆ้ซไบ่ขซๅ ฅไพต็้ขจ้ช๏ผๅ ็บๆปๆ่ ๆ่ฉฆๅๅฉ็จๆชไฟฎ่ฃ็ CVE๏ผ็่ณๆฏ้ๅป็ๆผๆดใ
Cato ็่ๆฌไฟฎ่ฃๆต็จๅ ๅซๅๅๆญฅ้ฉ๏ผๅ จ้จ็ฑ Cato ๅฎๅ จๅ้่ฒ ่ฒฌๅท่ก๏ผ
่ฉไผฐ
่ฉไผฐ CVE ็ ๅฝฑ้ฟ็ฏๅไธฆ็ ็ฉถ ็ธ้ๆผๆดใ็นๅฅๆฏ้ๅฐ ๅฏฆ้ไธญๅฉ็จๆญค CVE ็ผๅๆปๆ็ๆ ๆณ้ฒ่กๅๆใ
ไบ่งฃๅๅฝฑ้ฟ็ ็ณป็ตฑ้กๅไปฅๅๅจ่ ่ก็บ่ ๅฆไฝๅท่กๆปๆ
้็ผ
ๅปบ็ซๆฐ็ๅ ฅไพต้ฒ็ฆฆ็ณป็ตฑ่ฆๅ ไพ่ๆฌไฟฎ่ฃๆญคๆผๆด
้้ๅๆธฌ ๆต้ๅ ่ณๆ ไพๆถ้ค่ชคๅ ฑ
้ธๆๆงไฟ่ญท
ๅจใๆจกๆฌๆจกๅผใไธ ้ธๆๆง้จ็ฝฒ่ๆฌ่ฃไธ
็บ็นๅฎๅฎขๆถ ๅ็จ้ธๆๆง้ฒ่ญท
ๅ จ็้ฒ่ญท
ๅฐ่ๆฌ่ฃไธ ๅๆ็บ้ฒ่ญทๆจกๅผ
ๅจๆๆๅฎขๆถๅๆๆๆต้ไธญๅผทๅถๅ็จ่ๆฌ่ฃไธ
ๆญคๆต็จๅฎๅ จไธ้่ฆๅฎขๆถ่ณๆบ็ๅ่๏ผไนไธๆๅฐๅฎขๆถ็ๆฅญๅ้ไฝ้ ๆไปปไฝ้ขจ้ชใ
