Everything Threat Times has reported about CVSS 10: 3 stories, newest first. Part of our Vulnerabilities coverage.
The Apache Software Foundation has released updates for Traffic Server to address a critical vulnerability that allows attackers to forge AWS signatures using proxy credentials.
A critical vulnerability in Apache Traffic Server allows attackers to bypass client certificate verification during TLS session resumption across virtual hosts.
The National Vulnerability Database lists a critical flaw in Royal Plugins SiteVault that allows attackers to execute code without authentication.