Vulnerabilidades en itsourcecode

661 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2026-2190MEDIUMitsourcecode School Management System controller.php sql injectionEPSS 0.4%CVE-2025-10065MEDIUMitsourcecode POS Point of Sale System dom_data_th.php cross site scriptingEPSS 0.4%CVE-2025-10063MEDIUMitsourcecode POS Point of Sale System deferred_table.php cross site scriptingEPSS 0.4%CVE-2025-10064MEDIUMitsourcecode POS Point of Sale System dom_data_two_headers.php cross site scriptingEPSS 0.4%CVE-2025-10067MEDIUMitsourcecode POS Point of Sale System empty_table.php cross site scriptingEPSS 0.4%CVE-2025-10066MEDIUMitsourcecode POS Point of Sale System dymanic_table.php cross site scriptingEPSS 0.4%CVE-2025-11119MEDIUMitsourcecode Hostel Management System POST Request index.php cross site scriptingEPSS 0.4%CVE-2026-1589MEDIUMitsourcecode School Management System index.php sql injectionEPSS 0.4%CVE-2026-1590MEDIUMitsourcecode School Management System index.php sql injectionEPSS 0.4%CVE-2026-3133MEDIUMitsourcecode Document Management System Login loging.php sql injectionEPSS 0.4%CVE-2024-12783MEDIUMitsourcecode Vehicle Management System billaction.php cross site scriptingEPSS 0.4%CVE-2026-3413MEDIUMitsourcecode University Management System admin_single_student.php sql injectionEPSS 0.4%CVE-2025-8172MEDIUMitsourcecode Employee Management System index.php sql injectionEPSS 0.4%CVE-2026-3151MEDIUMitsourcecode College Management System login.php sql injectionEPSS 0.4%CVE-2025-7127MEDIUMitsourcecode Employee Management System changepassword.php sql injectionEPSS 0.4%CVE-2026-3760MEDIUMitsourcecode University Management System view_result.php sql injectionEPSS 0.4%CVE-2026-1159MEDIUMitsourcecode Online Frozen Foods Ordering System order_online.php sql injectionEPSS 0.4%CVE-2025-14584MEDIUMitsourcecode COVID Tracking System Admin Login login.php sql injectionEPSS 0.4%CVE-2025-13297MEDIUMitsourcecode Web-Based Internet Laboratory Management System controller.php sql injectionEPSS 0.4%CVE-2025-13301MEDIUMitsourcecode Web-Based Internet Laboratory Management System controller.php sql injectionEPSS 0.4%