Vulnerabilidades em itsourcecode

661 resultados
Análise Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2026-10301MEDIUMitsourcecode Fees Management System index.php cross site scriptingEPSS 0.3%CVE-2026-10810MEDIUMitsourcecode Fees Management System navbar.php cross site scriptingEPSS 0.3%CVE-2026-11512MEDIUMitsourcecode Hospital Management System billing.php cross site scriptingEPSS 0.3%CVE-2026-4474MEDIUMitsourcecode University Management System admin_single_student_update.php cross site scriptingEPSS 0.3%CVE-2026-3812MEDIUMitsourcecode Payroll Management System manage_employee_allowances.php cross site scriptingEPSS 0.3%CVE-2026-3412MEDIUMitsourcecode University Management System att_single_view.php cross site scriptingEPSS 0.3%CVE-2026-86268MEDIUMitsourcecode School Management System User_Login.php sql injectionEPSS 0.3%CVE-2026-82615MEDIUMitsourcecode Online Medicine Delivery System Password Recovery passwordrecover.php find_phone sql injectionEPSS 0.3%CVE-2026-10249MEDIUMitsourcecode Online Blood Bank Management System viewrequest.php sql injectionEPSS 0.3%CVE-2026-3982MEDIUMitsourcecode University Management System view_result.php cross site scriptingEPSS 0.3%CVE-2026-3993MEDIUMitsourcecode Payroll Management System manage_employee_deductions.php cross site scriptingEPSS 0.3%CVE-2026-4877MEDIUMitsourcecode Payroll Management System index.php cross site scriptingEPSS 0.3%CVE-2026-6030MEDIUMitsourcecode Construction Management System del1.php sql injectionEPSS 0.3%CVE-2026-3150MEDIUMitsourcecode College Management System display-teacher.php sql injectionEPSS 0.3%CVE-2026-3767MEDIUMitsourcecode sanitize or validate this input teacher-attendance.php sql injectionEPSS 0.3%CVE-2026-10250MEDIUMitsourcecode Online Blood Bank Management System campsdetails.php sql injectionEPSS 0.3%CVE-2026-10251MEDIUMitsourcecode Online House Rental System ajax.php login sql injectionEPSS 0.3%CVE-2026-90789MEDIUMitsourcecode Leave Management System login.php sql injectionEPSS 0.3%CVE-2026-78246MEDIUMitsourcecode Online Clinic Management System Admin Login login.php sql injectionEPSS 0.3%CVE-2026-85187MEDIUMitsourcecode Online Medicine Delivery System Order Status Update controller.php pupdate sql injectionEPSS 0.3%