Vulnerabilidades en itsourcecode

658 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2025-13286MEDIUMitsourcecode Online Voting System ajax.php sql injectionEPSS 0.3%CVE-2025-13325MEDIUMitsourcecode Student Information System enrollment_edit1.php sql injectionEPSS 0.3%CVE-2025-13570MEDIUMitsourcecode COVID Tracking System page sql injectionEPSS 0.3%CVE-2025-13581MEDIUMitsourcecode Student Information System schedule_edit1.php sql injectionEPSS 0.3%CVE-2025-13568MEDIUMitsourcecode COVID Tracking System page sql injectionEPSS 0.3%CVE-2025-13569MEDIUMitsourcecode COVID Tracking System page sql injectionEPSS 0.3%CVE-2026-2867MEDIUMitsourcecode Vehicle Management System billaction.php sql injectionEPSS 0.3%CVE-2025-13061MEDIUMitsourcecode Online Voting System index.php unrestricted uploadEPSS 0.3%CVE-2026-85208MEDIUMitsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted uploadEPSS 0.3%CVE-2026-78202MEDIUMitsourcecode Payroll System admin_class.php save_settings unrestricted uploadEPSS 0.3%CVE-2025-10027MEDIUMitsourcecode POS Point of Sale System 2512.php cross site scriptingEPSS 0.3%CVE-2025-10026MEDIUMitsourcecode POS Point of Sale System -complex_header.php cross site scriptingEPSS 0.3%CVE-2025-11433MEDIUMitsourcecode Leave Management System Query Parameter controller.php redirect cross site scriptingEPSS 0.3%CVE-2025-10028MEDIUMitsourcecode POS Point of Sale System 6776.php cross site scriptingEPSS 0.3%CVE-2025-10029MEDIUMitsourcecode POS Point of Sale System complex_header_2.php cross site scriptingEPSS 0.3%CVE-2026-3149MEDIUMitsourcecode College Management System asign-single-student-subjects.php sql injectionEPSS 0.3%CVE-2026-4236MEDIUMitsourcecode Online Enrollment System index.php sql injectionEPSS 0.3%CVE-2025-10631MEDIUMitsourcecode Online Petshop Management System Available Products addcnp.php cross site scriptingEPSS 0.3%CVE-2025-10632MEDIUMitsourcecode Online Petshop Management System Admin Dashboard availableframe.php cross site scriptingEPSS 0.3%CVE-2026-10301MEDIUMitsourcecode Fees Management System index.php cross site scriptingEPSS 0.3%