# CVEs published 2018-09-08

7 CVEs were published on September 8, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-16724](https://cve.now/CVE-2018-16724.md): An issue is discovered in baijiacms V4. (no CVSS)
- [CVE-2018-16725](https://cve.now/CVE-2018-16725.md): An issue is discovered in baijiacms V4. (no CVSS)
- [CVE-2018-16730](https://cve.now/CVE-2018-16730.md): \\upload\\plugins\\sys\\Install.php in CScms 4.1 has XSS via the site name. (no CVSS)
- [CVE-2018-16731](https://cve.now/CVE-2018-16731.md): CScms 4.1 allows arbitrary file upload by (for example) adding the php extension to the default filetype list (gif, jpg, png), and then prov (no CVSS)
- [CVE-2018-16732](https://cve.now/CVE-2018-16732.md): \\upload\\plugins\\sys\\admin\\Setting.php in CScms 4.1 allows CSRF via admin.php/setting/ftp\_save. (no CVSS)
- [CVE-2018-16733](https://cve.now/CVE-2018-16733.md): In Go Ethereum (aka geth) before 1.8.14, TraceChain in eth/api\_tracer.go does not verify that the end block is after the start block. (no CVSS, github.com/ethereum/go-ethereum)
- [CVE-2018-16715](https://cve.now/CVE-2018-16715.md): An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.