Monthly
Stored cross-site scripting in phpMyFAQ 4.2.0-alpha allows FAQ editors to bypass SVG sanitization and execute script in the application origin when a victim opens a crafted SVG file. Exploitation requires an authenticated account with FAQ-editor privileges and victim interaction; the root cause is a single-pass sanitizer that can reassemble a split script tag around removed XML processing instructions. Only the 4.2.0 pre-release window from 4.2.0-alpha up to but not including 4.2.0-beta is affected, and no public exploit identified at time of analysis.
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable.
Stored cross-site scripting in phpMyFAQ 4.2.0-alpha allows FAQ editors to bypass SVG sanitization and execute script in the application origin when a victim opens a crafted SVG file. Exploitation requires an authenticated account with FAQ-editor privileges and victim interaction; the root cause is a single-pass sanitizer that can reassemble a split script tag around removed XML processing instructions. Only the 4.2.0 pre-release window from 4.2.0-alpha up to but not including 4.2.0-beta is affected, and no public exploit identified at time of analysis.
Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.
Improper serialization of internal state in the authorization subsystem in MongoDB Server's authorization subsystem permits a user with valid credentials to bypass IP whitelisting protection. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable.