Vulnerabilidades em thorsten

176 resultados
Análise Vexday

Com 115 CVEs catalogadas e 24 surgidas nos últimos 90 dias, o vendor Thorsten apresenta um volume de vulnerabilidades recente que merece atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, com nenhuma entrada no CISA KEV, o que sugere menor pressão imediata de ataques em curso — embora 7 falhas de severidade crítica e 4 com PoC pública representem superfície de ataque concreta. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), indicando lacunas persistentes em validação e sanitização de entrada. A CVE mais perigosa no momento, CVE-2022-3766, registra EPSS de 0.0574, valor relativamente contido, mas que deve ser monitorado especialmente em ambientes onde atualizações não são aplicadas de forma sistemática.

CVE-2023-5867MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1885MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1875MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1761MEDIUMCross-site Scripting in thorsten/phpmyfaqEPSS 0.5%CVE-2023-5319HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1879MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-2427MEDIUMCross-site Scripting (XSS) - Reflected in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1759MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-1756MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-6890MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2023-6889MEDIUMCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2022-4409MEDIUMSensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqEPSS 0.5%CVE-2023-2550HIGHCross-site Scripting (XSS) - Stored in thorsten/phpmyfaqEPSS 0.5%CVE-2026-24420MEDIUMphpMyFAQ: Attachment download allowed without dlattachment right (broken access control)EPSS 0.5%CVE-2026-76207HIGHphpMyFAQ before 4.1.7 2FA Bypass via Remember-Me CookieEPSS 0.5%CVE-2026-27836HIGHphpMyFAQ Allows Unauthenticated Account Creation via WebAuthn Prepare EndpointEPSS 0.5%CVE-2026-76213CRITICALphpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped ThrottleEPSS 0.4%CVE-2023-1884MEDIUMCross-site Scripting (XSS) - Generic in thorsten/phpmyfaqEPSS 0.4%CVE-2026-76208HIGHphpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAPEPSS 0.4%CVE-2026-111898HIGHphpMyFAQ 4.2.0-alpha before 4.2.0-beta Account Takeover via Keycloak Implicit Account LinkingEPSS 0.4%