Vulnerabilidades en itsourcecode

660 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2026-10810MEDIUMitsourcecode Fees Management System navbar.php cross site scriptingEPSS 0.3%CVE-2026-10301MEDIUMitsourcecode Fees Management System index.php cross site scriptingEPSS 0.3%CVE-2026-4474MEDIUMitsourcecode University Management System admin_single_student_update.php cross site scriptingEPSS 0.3%CVE-2026-3412MEDIUMitsourcecode University Management System att_single_view.php cross site scriptingEPSS 0.3%CVE-2026-3812MEDIUMitsourcecode Payroll Management System manage_employee_allowances.php cross site scriptingEPSS 0.3%CVE-2026-4877MEDIUMitsourcecode Payroll Management System index.php cross site scriptingEPSS 0.3%CVE-2026-3993MEDIUMitsourcecode Payroll Management System manage_employee_deductions.php cross site scriptingEPSS 0.3%CVE-2026-10249MEDIUMitsourcecode Online Blood Bank Management System viewrequest.php sql injectionEPSS 0.3%CVE-2026-82615MEDIUMitsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injectionEPSS 0.3%CVE-2026-86268MEDIUMitsourcecode School Management System User_Login.php sql injectionEPSS 0.3%CVE-2026-3982MEDIUMitsourcecode University Management System view_result.php cross site scriptingEPSS 0.3%CVE-2026-6030MEDIUMitsourcecode Construction Management System del1.php sql injectionEPSS 0.3%CVE-2026-3767MEDIUMitsourcecode sanitize or validate this input teacher-attendance.php sql injectionEPSS 0.3%CVE-2026-3150MEDIUMitsourcecode College Management System display-teacher.php sql injectionEPSS 0.3%CVE-2026-3043MEDIUMitsourcecode Event Management System navbar.php cross site scriptingEPSS 0.3%CVE-2026-10252MEDIUMitsourcecode Online House Rental System manage_tenant.php sql injectionEPSS 0.3%CVE-2026-10251MEDIUMitsourcecode Online House Rental System ajax.php login sql injectionEPSS 0.3%CVE-2026-82612MEDIUMitsourcecode Online Medicine Delivery System Product Detail index.php loadResultList sql injectionEPSS 0.3%CVE-2026-90789MEDIUMitsourcecode Leave Management System login.php sql injectionEPSS 0.3%CVE-2026-78201MEDIUMitsourcecode Payroll System admin_class.php login sql injectionEPSS 0.3%