Vulnerabilidades em itsourcecode

694 resultados
Análise Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2024-6016MEDIUMitsourcecode Online Laundry Management System admin_class.php sql injectionEPSS 0.5%CVE-2026-1594MEDIUMitsourcecode Society Management System add_expenses.php sql injectionEPSS 0.5%CVE-2024-8171MEDIUMitsourcecode Tailoring Management System staffcatedit.php sql injectionEPSS 0.5%CVE-2024-7944MEDIUMitsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted uploadEPSS 0.5%CVE-2024-7455MEDIUMitsourcecode Tailoring Management System partedit.php sql injectionEPSS 0.5%CVE-2024-6953MEDIUMitsourcecode Tailoring Management System sms.php sql injectionEPSS 0.5%CVE-2025-3245MEDIUMitsourcecode Library Management System Forgot.java search sql injectionEPSS 0.5%CVE-2025-0946MEDIUMitsourcecode Tailoring Management System templatedelete.php sql injectionEPSS 0.5%CVE-2025-0945MEDIUMitsourcecode Tailoring Management System typedelete.php sql injectionEPSS 0.5%CVE-2024-9036MEDIUMitsourcecode Online Bookstore admin_add.php unrestricted uploadEPSS 0.5%CVE-2024-6009MEDIUMitsourcecode Event Calendar process.php regDelete sql injectionEPSS 0.5%CVE-2024-6015MEDIUMitsourcecode Online House Rental System manage_user.php sql injectionEPSS 0.5%CVE-2024-6014MEDIUMitsourcecode Document Management System edithis.php sql injectionEPSS 0.5%CVE-2024-6013MEDIUMitsourcecode Online Book Store admin_delete.php sql injectionEPSS 0.5%CVE-2025-9592MEDIUMitsourcecode Apartment Management System bill_info.php sql injectionEPSS 0.5%CVE-2026-78245MEDIUMitsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted uploadEPSS 0.5%CVE-2026-85208MEDIUMitsourcecode Online Medicine Delivery System Order Management Controller controller.php doInsert unrestricted uploadEPSS 0.5%CVE-2026-13553MEDIUMitsourcecode Online Hotel Management System controller.php add unrestricted uploadEPSS 0.5%CVE-2026-78202MEDIUMitsourcecode Payroll System admin_class.php save_settings unrestricted uploadEPSS 0.5%CVE-2025-8135MEDIUMitsourcecode Insurance Management System updateAgent.php sql injectionEPSS 0.5%