Vulnerabilidades en itsourcecode

661 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2025-15167MEDIUMitsourcecode Online Cake Ordering System detailtransac.php sql injectionEPSS 0.4%CVE-2024-8216MEDIUMnafisulbari/itsourcecode Insurance Management System Payment editPayment.php access controlEPSS 0.4%CVE-2026-1134MEDIUMitsourcecode Society Management System expenses.php cross site scriptingEPSS 0.4%CVE-2026-1135MEDIUMitsourcecode Society Management System activity.php cross site scriptingEPSS 0.4%CVE-2025-9840MEDIUMitsourcecode Sports Management System gametype.php sql injectionEPSS 0.4%CVE-2025-10411MEDIUMitsourcecode E-Logbook with Health Monitoring System for COVID-19 POST Request check_profile.php cross site scriptingEPSS 0.4%CVE-2026-3730MEDIUMitsourcecode Free Hotel Reservation System index.php sql injectionEPSS 0.4%CVE-2026-1118MEDIUMitsourcecode Society Management System add_activity.php sql injectionEPSS 0.4%CVE-2025-10615MEDIUMitsourcecode E-Commerce Website products.php unrestricted uploadEPSS 0.4%CVE-2026-3487MEDIUMitsourcecode College Management System class-result.php sql injectionEPSS 0.4%CVE-2025-10614MEDIUMitsourcecode E-Logbook with Health Monitoring System for COVID-19 print_reports_prev.php cross site scriptingEPSS 0.4%CVE-2025-11088MEDIUMitsourcecode Open Source Job Portal index.php sql injectionEPSS 0.3%CVE-2026-13495MEDIUMitsourcecode Hospital Management System adminprofile.php sql injectionEPSS 0.3%CVE-2025-13210MEDIUMitsourcecode Inventory Management System index.php sql injectionEPSS 0.3%CVE-2026-1688MEDIUMitsourcecode Directory Management System index.php sql injectionEPSS 0.3%CVE-2026-1595MEDIUMitsourcecode Society Management System edit_student_query.php sql injectionEPSS 0.3%CVE-2024-8209MEDIUMnafisulbari/itsourcecode Insurance Management System addClient.php cross site scriptingEPSS 0.3%CVE-2025-7182MEDIUMitsourcecode Student Transcript Processing System edit.php cross site scriptingEPSS 0.3%CVE-2025-4310MEDIUMitsourcecode Content Management System add_topic.php unrestricted uploadEPSS 0.3%CVE-2026-3747MEDIUMitsourcecode University Management System add_result.php sql injectionEPSS 0.3%