Vulnerabilidades em banq
13 resultadosAnálise Vexday
A base registra 13 vulnerabilidades no fornecedor banq, todas publicadas nos últimos 90 dias, indicando exposição recente e potencialmente não totalmente mitigada. Embora nenhuma esteja sob ataque ativo no momento, a dominância de CWE-79 (cross-site scripting) aponta para fraqueza estrutural em validação de entrada, exigindo remediação sistemática. Ausência de críticas CVSS não elimina o risco acumulado de múltiplas falhas em componentes de segurança web.
CVE-2026-107792MEDIUMJivejdon through commit ee67a65e Missing Authorization via /message/threadToForum/save Thread MoveEPSS —CVE-2026-107831MEDIUMJivejdon through 5.0 CSRF via GET-based Account and Thread ActionsEPSS —CVE-2026-107797MEDIUMJivejdon through 5.0 Reflected XSS via postThread.jsp to and tag ParametersEPSS —CVE-2026-107796MEDIUMJivejdon through commit ee67a65e Reflected XSS via taggedThreadList.jsp tagID and count ParametersEPSS —CVE-2026-107828MEDIUMJivejdon through 5.0 Predictable Passwords via Sina Weibo OAuth LoginEPSS —CVE-2026-107799MEDIUMJivejdon through 5.0 Stored XSS via messageListBody.jsp Forum Message RenderingEPSS —CVE-2026-107829HIGHJivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSqlEPSS —CVE-2026-107800MEDIUMJivejdon through 5.0 Stored XSS via Private Short MessagesEPSS —CVE-2026-107830MEDIUMJivejdon through commit ee67a65e Missing Rate Limiting via /account/smsVRAction SMS EndpointEPSS —CVE-2025-71428MEDIUMJivejdon through 5.0 SQL Injection via username in userListActionEPSS —CVE-2026-107801MEDIUMJivejdon through 5.0 Stored XSS via Attachment Upload Content-TypeEPSS —CVE-2026-107793MEDIUMJivejdon through 5.0 IDOR via subSaveAction Subscription DeleteEPSS —CVE-2026-107798MEDIUMJivejdon through commit ee67a65e Stored XSS via Markdown Links in TextStyle Rendering FilterEPSS —