Vulnerabilities in itsourcecode

661 results
Vexday analysis

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2026-90600MEDIUMitsourcecode Sales and Inventory System inv_edit1.php sql injectionEPSS 0.2%CVE-2026-4356MEDIUMitsourcecode University Management System add_result.php cross site scriptingEPSS 0.2%CVE-2026-4238MEDIUMitsourcecode College Management System courses.php sql injectionEPSS 0.2%CVE-2026-10297MEDIUMitsourcecode Fees Management System manage_course.php sql injectionEPSS 0.2%CVE-2026-94032MEDIUMitsourcecode Leave Management System index.php sql injectionEPSS 0.2%CVE-2026-10808MEDIUMitsourcecode Fees Management System manage_student.php sql injectionEPSS 0.2%CVE-2026-76991MEDIUMitsourcecode Hospital Management System viewappointmentapproved.php sql injectionEPSS 0.2%CVE-2026-86267MEDIUMitsourcecode Information System Society Membership System check_student.php sql injectionEPSS 0.2%CVE-2026-10302MEDIUMitsourcecode Fees Management System manage_fee.php sql injectionEPSS 0.2%CVE-2026-86270MEDIUMitsourcecode Sales and Inventory System settings_edit.php sql injectionEPSS 0.2%CVE-2026-82485MEDIUMitsourcecode Sales and Inventory System pro_edit.php sql injectionEPSS 0.2%CVE-2026-19347MEDIUMitsourcecode Hospital Management System viewdoctor.php sql injectionEPSS 0.2%CVE-2026-82545MEDIUMitsourcecode Sales and Inventory System sup_searchfrm.php sql injectionEPSS 0.2%CVE-2026-19364MEDIUMitsourcecode Hospital Management System viewdoctorconsultancycharge.php sql injectionEPSS 0.2%CVE-2026-86236MEDIUMitsourcecode Sales and Inventory System pro_transac.php add sql injectionEPSS 0.2%CVE-2026-92526MEDIUMitsourcecode Leave Management System index.php sql injectionEPSS 0.2%CVE-2026-19973MEDIUMitsourcecode Hospital Management System viewpaymentreport.php sql injectionEPSS 0.2%CVE-2026-11513MEDIUMitsourcecode Hospital Management System adminaccount.php sql injectionEPSS 0.2%CVE-2026-85383MEDIUMitsourcecode Sales and Inventory System inv_del.php sql injectionEPSS 0.2%CVE-2026-90597MEDIUMitsourcecode Sales and Inventory System sup_edit1.php sql injectionEPSS 0.2%