Vulnerabilidades em itsourcecode

694 resultados
Análise Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2025-9507MEDIUMitsourcecode Apartment Management System visitor_info.php sql injectionEPSS 0.4%CVE-2025-9600MEDIUMitsourcecode Apartment Management System member_type_setup.php sql injectionEPSS 0.4%CVE-2025-9597MEDIUMitsourcecode Apartment Management System rented_all_info.php sql injectionEPSS 0.4%CVE-2025-9594MEDIUMitsourcecode Apartment Management System complain_info.php sql injectionEPSS 0.4%CVE-2025-9156MEDIUMitsourcecode Sports Management System sports.php sql injectionEPSS 0.4%CVE-2025-9601MEDIUMitsourcecode Apartment Management System employee_salary_setup.php sql injectionEPSS 0.4%CVE-2025-9472MEDIUMitsourcecode Apartment Management System add_owner_utility.php sql injectionEPSS 0.4%CVE-2025-9510MEDIUMitsourcecode Apartment Management System addbranch.php sql injectionEPSS 0.4%CVE-2025-9839MEDIUMitsourcecode Student Information Management System index.php sql injectionEPSS 0.4%CVE-2025-9599MEDIUMitsourcecode Apartment Management System month_setup.php sql injectionEPSS 0.4%CVE-2025-9311MEDIUMitsourcecode Apartment Management System addfair.php sql injectionEPSS 0.4%CVE-2025-9511MEDIUMitsourcecode Apartment Management System addvisitor.php sql injectionEPSS 0.4%CVE-2025-9593MEDIUMitsourcecode Apartment Management System unit_status_info.php sql injectionEPSS 0.4%CVE-2025-9765MEDIUMitsourcecode Sports Management System tournament_details.php sql injectionEPSS 0.4%CVE-2025-10112MEDIUMitsourcecode Student Information Management System index.php sql injectionEPSS 0.4%CVE-2025-10834MEDIUMitsourcecode Open Source Job Portal login.php sql injectionEPSS 0.4%CVE-2025-10113MEDIUMitsourcecode Student Information Management System index.php sql injectionEPSS 0.4%CVE-2025-10068MEDIUMitsourcecode Online Discussion Forum add_views.php sql injectionEPSS 0.4%CVE-2025-10426MEDIUMitsourcecode Online Laundry Management System login.php sql injectionEPSS 0.4%CVE-2025-10668MEDIUMitsourcecode Online Discussion Forum compose_msg_admin.php sql injectionEPSS 0.4%