Vulnerabilidades en itsourcecode

661 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2025-9645MEDIUMitsourcecode Apartment Management System r_all_info.php sql injectionEPSS 0.4%CVE-2025-9730MEDIUMitsourcecode Apartment Management System updateProfile.php sql injectionEPSS 0.4%CVE-2025-13298MEDIUMitsourcecode Web-Based Internet Laboratory Management System controller.php sql injectionEPSS 0.4%CVE-2025-13285MEDIUMitsourcecode Online Voting System login.php sql injectionEPSS 0.4%CVE-2025-10405MEDIUMitsourcecode Baptism Information Management System listbaptism.php sql injectionEPSS 0.4%CVE-2025-14585MEDIUMitsourcecode COVID Tracking System page sql injectionEPSS 0.4%CVE-2025-7193MEDIUMitsourcecode Agri-Trading Online Shopping System suppliercontroller.php sql injectionEPSS 0.4%CVE-2025-9679MEDIUMitsourcecode Student Information System course_edit1.php sql injectionEPSS 0.4%CVE-2026-78244MEDIUMitsourcecode Real Estate Management System search.php sql injectionEPSS 0.4%CVE-2025-12608MEDIUMitsourcecode Online Loan Management System manage_user.php sql injectionEPSS 0.4%CVE-2026-1545MEDIUMitsourcecode School Management System index.php sql injectionEPSS 0.4%CVE-2025-8135MEDIUMitsourcecode Insurance Management System updateAgent.php sql injectionEPSS 0.4%CVE-2025-9644MEDIUMitsourcecode Apartment Management System bill_setup.php sql injectionEPSS 0.4%CVE-2026-81202MEDIUMitsourcecode Payroll System CRUD Operation ajax.php delete missing authenticationEPSS 0.4%CVE-2025-14650MEDIUMitsourcecode Online Cake Ordering System product.php sql injectionEPSS 0.4%CVE-2026-2161MEDIUMitsourcecode Directory Management System forget-password.php sql injectionEPSS 0.4%CVE-2026-3153MEDIUMitsourcecode Document Management System register.php sql injectionEPSS 0.4%CVE-2026-2190MEDIUMitsourcecode School Management System controller.php sql injectionEPSS 0.4%CVE-2026-2114MEDIUMitsourcecode Society Management System edit_admin.php sql injectionEPSS 0.4%CVE-2026-2189MEDIUMitsourcecode School Management System index.php sql injectionEPSS 0.4%