Vulnerabilidades em itsourcecode

694 resultados
Análise Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2024-6008MEDIUMitsourcecode Online Book Store edit_book.php sql injectionEPSS 0.5%CVE-2026-3042MEDIUMitsourcecode Event Management System index.php sql injectionEPSS 0.5%CVE-2026-3944MEDIUMitsourcecode University Management System att_add.php sql injectionEPSS 0.5%CVE-2025-0950MEDIUMitsourcecode Tailoring Management System staffview.php sql injectionEPSS 0.5%CVE-2025-7193MEDIUMitsourcecode Agri-Trading Online Shopping System suppliercontroller.php sql injectionEPSS 0.5%CVE-2025-10618MEDIUMitsourcecode Online Clinic Management System transact.php sql injectionEPSS 0.5%CVE-2024-7934MEDIUMitsourcecode Project Expense Monitoring System execute.php sql injectionEPSS 0.5%CVE-2026-1701MEDIUMitsourcecode School Management System index.php sql injectionEPSS 0.5%CVE-2024-7935MEDIUMitsourcecode Project Expense Monitoring System print.php sql injectionEPSS 0.5%CVE-2025-14256MEDIUMitsourcecode Student Management System newcurriculm.php sql injectionEPSS 0.5%CVE-2025-14257MEDIUMitsourcecode Student Management System newrecord.php sql injectionEPSS 0.5%CVE-2024-7303MEDIUMitsourcecode Online Blood Bank Management System Send Blood Request Page request.php cross site scriptingEPSS 0.5%CVE-2024-7945MEDIUMitsourcecode Laravel Property Management System Notes Page create cross site scriptingEPSS 0.5%CVE-2025-8981MEDIUMitsourcecode Online Tour and Travel Management System payment.php sql injectionEPSS 0.5%CVE-2025-8982MEDIUMitsourcecode Online Tour and Travel Management System currency.php sql injectionEPSS 0.5%CVE-2025-8969MEDIUMitsourcecode Online Tour and Travel Management System approve_user.php sql injectionEPSS 0.5%CVE-2025-8993MEDIUMitsourcecode Online Tour and Travel Management System expense_report.php sql injectionEPSS 0.5%CVE-2025-9008MEDIUMitsourcecode Online Tour and Travel Management System sms_setting.php sql injectionEPSS 0.5%CVE-2025-8970MEDIUMitsourcecode Online Tour and Travel Management System booking.php sql injectionEPSS 0.5%CVE-2025-8966MEDIUMitsourcecode Online Tour and Travel Management System tax.php sql injectionEPSS 0.5%