idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
CSRF
Idccms
NVD
GitHub
CVSS 3.1
3.8
EPSS
0.2%
Sunshine is a self-hosted game stream host for Moonlight. Rated low severity (CVSS 2.9).
Information Disclosure
Microsoft
Sunshine
NVD
GitHub
CVSS 3.1
2.9
EPSS
0.2%
Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2022.0.0 published Nov 2023 may allow an authenticated user to potentially enable information disclosure via. Rated low severity (CVSS 2.8), this vulnerability is low attack complexity. No vendor patch available.
Intel
Buffer Overflow
Information Disclosure
NVD
CVSS 3.1
2.8
EPSS
0.2%