Vulnerabilidades em itsourcecode

661 resultados
Análise Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2024-7945MEDIUMitsourcecode Laravel Property Management System Notes Page create cross site scriptingEPSS 0.5%CVE-2025-10800MEDIUMitsourcecode Online Discussion Forum index.php sql injectionEPSS 0.5%CVE-2025-10599MEDIUMitsourcecode Web-Based Internet Laboratory Management System login.php AuthenticateUser sql injectionEPSS 0.5%CVE-2025-11432MEDIUMitsourcecode Leave Management System reset.php sql injectionEPSS 0.5%CVE-2024-6041MEDIUMitsourcecode Gym Management System manage_user.php sql injectionEPSS 0.5%CVE-2025-10618MEDIUMitsourcecode Online Clinic Management System transact.php sql injectionEPSS 0.5%CVE-2026-78245MEDIUMitsourcecode Online Pharmacy System User Registration register.php move_uploaded_file unrestricted uploadEPSS 0.5%CVE-2026-13557MEDIUMitsourcecode Online Hotel Management System POST Request controller.php add cross site scriptingEPSS 0.5%CVE-2026-16229MEDIUMitsourcecode Courier Management System index.php cross site scriptingEPSS 0.5%CVE-2026-13554MEDIUMitsourcecode Online Hotel Management System POST Request controller.php add cross site scriptingEPSS 0.5%CVE-2026-13556MEDIUMitsourcecode Online Hotel Management System POST Request controller.php edit cross site scriptingEPSS 0.5%CVE-2025-0949MEDIUMitsourcecode Tailoring Management System partview.php sql injectionEPSS 0.5%CVE-2026-1701MEDIUMitsourcecode School Management System index.php sql injectionEPSS 0.5%CVE-2025-11736MEDIUMitsourcecode Online Examination System index.php sql injectionEPSS 0.5%CVE-2024-7278MEDIUMitsourcecode Alton Management System team_save.php sql injectionEPSS 0.5%CVE-2025-10616MEDIUMitsourcecode E-Commerce Website users.php unrestricted uploadEPSS 0.5%CVE-2025-15074MEDIUMitsourcecode Online Frozen Foods Ordering System customer_details.php sql injectionEPSS 0.5%CVE-2025-9417MEDIUMitsourcecode Apartment Management System addemployee.php sql injectionEPSS 0.5%CVE-2024-6195MEDIUMitsourcecode Tailoring Management System orderadd.php sql injectionEPSS 0.4%CVE-2025-9153MEDIUMitsourcecode Online Tour and Travel Management System travellers.php unrestricted uploadEPSS 0.4%