Vulnerabilidades em thorsten

176 resultados
Análise Vexday

Com 115 CVEs catalogadas e 24 surgidas nos últimos 90 dias, o vendor Thorsten apresenta um volume de vulnerabilidades recente que merece atenção contínua. A taxa de exploração ativa está abaixo da média geral do catálogo, com nenhuma entrada no CISA KEV, o que sugere menor pressão imediata de ataques em curso — embora 7 falhas de severidade crítica e 4 com PoC pública representem superfície de ataque concreta. O tipo de falha mais recorrente é CWE-79 (Cross-Site Scripting), indicando lacunas persistentes em validação e sanitização de entrada. A CVE mais perigosa no momento, CVE-2022-3766, registra EPSS de 0.0574, valor relativamente contido, mas que deve ser monitorado especialmente em ambientes onde atualizações não são aplicadas de forma sistemática.

CVE-2026-85587MEDIUMphpMyFAQ before 4.1.8 Incorrect Authorization via Admin PagesEPSS 0.4%CVE-2026-76206MEDIUMphpMyFAQ before 4.1.7 Information Disclosure via PDF ExportEPSS 0.4%CVE-2026-111893HIGHphpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions APIEPSS 0.4%CVE-2026-75920MEDIUMphpMyFAQ before 4.1.6 Information Disclosure via Backup ZIPEPSS 0.4%CVE-2026-76215MEDIUMphpMyFAQ before 4.1.7 Missing Authorization via child resourcesEPSS 0.4%CVE-2026-34973MEDIUMphpMyFAQ has a LIKE Wildcard Injection in Search.php — Unescaped % and _ Metacharacters Enable Broad Content DisclosureEPSS 0.3%CVE-2026-111884HIGHphpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Missing Current-Password Step-Up on E-mail Change Enables Account TakeoverEPSS 0.3%CVE-2026-109573CRITICALphpMyFAQ before 4.1.9 SQL Injection via api/autocomplete Search EndpointEPSS 0.3%CVE-2026-111904MEDIUMphpMyFAQ 4.2.0-alpha before 4.2.0-beta Information Disclosure via open-questions APIEPSS 0.3%CVE-2026-46366HIGHphpMyFAQ - Unauthenticated Information Disclosure via getIdFromSolutionId Permission BypassEPSS 0.3%CVE-2026-111887MEDIUMphpMyFAQ before 4.1.9 and 4.2.0-alpha before 4.2.0-beta Account Enumeration via Guest Comment EndpointEPSS 0.3%CVE-2023-5866MEDIUMSensitive Cookie in HTTPS Session Without 'Secure' Attribute in thorsten/phpmyfaqEPSS 0.3%CVE-2026-111897HIGHphpMyFAQ 4.2.0-alpha before 4.2.0-beta Authorization Bypass in Attachment Administration EndpointsEPSS 0.3%CVE-2026-111892MEDIUMphpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Rate Limiting on Password-Reset EndpointsEPSS 0.3%CVE-2026-111885HIGHphpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup APIEPSS 0.3%CVE-2026-85592MEDIUMphpMyFAQ before 4.1.8 Authorization Bypass via question/createEPSS 0.3%CVE-2026-46362HIGHphpMyFAQ - Authorization Bypass in Admin Pages via Non-Terminating Permission CheckEPSS 0.3%CVE-2026-35676HIGHphpMyFAQ - Unauthenticated Password Reset via User Password Update EndpointEPSS 0.3%CVE-2026-76211MEDIUMphpMyFAQ before 4.1.7 Information Disclosure via Admin APIEPSS 0.3%CVE-2026-66399HIGHphpMyFAQ before 4.1.6 Privilege Escalation via Group MembershipEPSS 0.3%