Vulnerabilidades em thorsten

176 resultados
Análise Vexday

Com 115 CVEs catalogadas e 24 surgidas nos últimos 90 dias, o vendor Thorsten apresenta um volume de vulnerabilidades recente que merece atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, com nenhuma entrada no CISA KEV, o que sugere menor pressão imediata de ataques em curso — embora 7 falhas de severidade crítica e 4 com PoC pública representem superfície de ataque concreta. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), indicando lacunas persistentes em validação e sanitização de entrada. A CVE mais perigosa no momento, CVE-2022-3766, registra EPSS de 0.0574, valor relativamente contido, mas que deve ser monitorado especialmente em ambientes onde atualizações não são aplicadas de forma sistemática.

CVE-2023-1760HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1882HIGHCross-site Scripting (XSS) - DOM in thorsten/phpmyfaqEPSS 0.5%CVE-2026-85588MEDIUMphpMyFAQ before 4.1.8 TOTP Secret Exposure via Data ExportEPSS 0.5%CVE-2026-56737HIGHphpMyFAQ's two-factor authentication login bypasses the password factorEPSS 0.5%CVE-2023-2998MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2026-85590HIGHphpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor DisableEPSS 0.5%CVE-2026-85591HIGHphpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password ChangeEPSS 0.5%CVE-2022-4408MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-0308HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-0309HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2024-29179MEDIUMphpMyFAQ Stored Cross-site Scripting at File AttachmentsEPSS 0.5%CVE-2024-54141HIGHphpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not availableEPSS 0.5%CVE-2026-75918HIGHphpMyFAQ before 4.1.7 Authentication Bypass via Tracking FileEPSS 0.5%CVE-2026-85586MEDIUMphpMyFAQ before 4.1.8 CAPTCHA Bypass via store parameterEPSS 0.5%CVE-2023-1883MEDIUMImproper Access Control in thorsten/phpmyfaqEPSS 0.5%CVE-2023-4007HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2026-85589MEDIUMphpMyFAQ before 4.2.0-alpha.2 Missing Authorization via Dashboard APIEPSS 0.5%CVE-2026-35672HIGHphpMyFAQ - Authentication Bypass via Empty API TokenEPSS 0.5%CVE-2023-2999MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-5316CRITICALCross-site Scripting (XSS) - DOM in thorsten/phpmyfaqEPSS 0.5%