\upload\plugins\sys\admin\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp_save. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
CSRF
PHP
Cscms
NVD
GitHub
CVSS 3.0
8.8
EPSS
0.5%
An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
Microsoft
Ctes Windows Agent
NVD
CVSS 3.0
8.8
EPSS
0.9%
In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api_tracer.go does not verify that the end block is after the start block. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Go Ethereum
NVD
GitHub
CVSS 3.0
7.5
EPSS
1.2%