Vulnerabilidades en itsourcecode

585 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2024-11631MEDIUMitsourcecode Tailoring Management System expedit.php sql injectionEPSS 0.7%CVE-2024-7498MEDIUMitsourcecode Airline Reservation System Admin Login Page login.php login2 sql injectionEPSS 0.7%CVE-2024-7273MEDIUMitsourcecode Alton Management System search.php sql injectionEPSS 0.7%CVE-2024-7496MEDIUMitsourcecode Airline Reservation System index.php file inclusionEPSS 0.7%CVE-2024-7497MEDIUMitsourcecode Airline Reservation System index.php file inclusionEPSS 0.7%CVE-2024-6253MEDIUMitsourcecode Online Food Ordering System purchase.php sql injectionEPSS 0.6%CVE-2024-7444MEDIUMitsourcecode Ticket Reservation System Login Page login.php sql injectionEPSS 0.6%CVE-2024-7274MEDIUMitsourcecode Alton Management System reservation_status.php sql injectionEPSS 0.6%CVE-2024-6065MEDIUMitsourcecode Bakery Online Ordering System index.php sql injectionEPSS 0.6%CVE-2024-6112MEDIUMitsourcecode Pool of Bethesda Online Reservation System index.php sql injectionEPSS 0.6%CVE-2024-5983MEDIUMitsourcecode Online Bookstore bookPerPub.php sql injectionEPSS 0.6%CVE-2024-6958MEDIUMitsourcecode University Management System Avatar File st_update.php unrestricted uploadEPSS 0.6%CVE-2024-7189MEDIUMitsourcecode Online Food Ordering System editproduct.php unrestricted uploadEPSS 0.6%CVE-2024-6190MEDIUMitsourcecode Farm Management System Login index.php sql injectionEPSS 0.6%CVE-2024-7450MEDIUMitsourcecode Placement Management System Image resume_upload.php unrestricted uploadEPSS 0.6%CVE-2024-5397MEDIUMitsourcecode Online Student Enrollment System instructorSubjects.php sql injectionEPSS 0.6%CVE-2024-5381MEDIUMitsourcecode Student Information Management System view.php sql injectionEPSS 0.6%CVE-2024-5733MEDIUMitsourcecode Online Discussion Forum register_me.php sql injectionEPSS 0.6%CVE-2024-5391MEDIUMitsourcecode Online Student Enrollment System listofsubject.php sql injectionEPSS 0.6%CVE-2024-7839MEDIUMitsourcecode Billing System addbill.php sql injectionEPSS 0.6%