Vulnerabilidades em itsourcecode

694 resultados
Análise Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2025-13567MEDIUMitsourcecode COVID Tracking System page sql injectionEPSS 0.3%CVE-2026-86245MEDIUMitsourcecode Sales and Inventory System sup_transac.php sql injectionEPSS 0.3%CVE-2026-86164MEDIUMitsourcecode Sales and Inventory System trans_view.php sql injectionEPSS 0.3%CVE-2026-78112MEDIUMitsourcecode Hospital Management System Project in PHP viewservicetype.php sql injectionEPSS 0.3%CVE-2026-14659MEDIUMitsourcecode Hospital Management System patientappointment.php sql injectionEPSS 0.3%CVE-2026-13548MEDIUMitsourcecode Hospital Management System doctortimings.php sql injectionEPSS 0.3%CVE-2026-82540MEDIUMitsourcecode Sales and Inventory System cust_searchfrm.php sql injectionEPSS 0.3%CVE-2026-86233MEDIUMitsourcecode Sales and Inventory System us_del.php sql injectionEPSS 0.3%CVE-2026-19934MEDIUMitsourcecode Hospital Management System vieworder.php sql injectionEPSS 0.3%CVE-2026-82541MEDIUMitsourcecode Sales and Inventory System sup_edit.php sql injectionEPSS 0.3%CVE-2026-90597MEDIUMitsourcecode Sales and Inventory System sup_edit1.php sql injectionEPSS 0.3%CVE-2026-77025MEDIUMitsourcecode Hospital Management System viewappointmentpending.php sql injectionEPSS 0.3%CVE-2026-86310MEDIUMitsourcecode Sales and Inventory System cust_edit1.php sql injectionEPSS 0.3%CVE-2026-86265MEDIUMitsourcecode Sales and Inventory System us_transac.php sql injectionEPSS 0.3%CVE-2026-78185MEDIUMitsourcecode Sales and Inventory System cust_edit.php sql injectionEPSS 0.3%CVE-2026-85383MEDIUMitsourcecode Sales and Inventory System inv_del.php sql injectionEPSS 0.3%CVE-2026-13530MEDIUMitsourcecode Hospital Management System Appointment appointmentdetail.php sql injectionEPSS 0.3%CVE-2026-13520MEDIUMitsourcecode Hospital Management System Appointment appointmentapproval.php sql injectionEPSS 0.3%CVE-2026-19894MEDIUMitsourcecode Hospital Management System viewmedicine.php sql injectionEPSS 0.3%CVE-2026-13531MEDIUMitsourcecode Hospital Management System department.php sql injectionEPSS 0.3%