Vulnerabilidades en itsourcecode

586 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2024-7081MEDIUMitsourcecode Tailoring Management System expcatadd.php sql injectionEPSS 0.6%CVE-2024-6652MEDIUMitsourcecode Gym Management System manage_member.php sql injectionEPSS 0.6%CVE-2024-7192MEDIUMitsourcecode Society Management System student.php unrestricted uploadEPSS 0.6%CVE-2024-5734MEDIUMitsourcecode Online Discussion Forum poster.php unrestricted uploadEPSS 0.6%CVE-2024-5395MEDIUMitsourcecode Online Student Enrollment System listofinstructor.php sql injectionEPSS 0.6%CVE-2024-5392MEDIUMitsourcecode Online Student Enrollment System editSubject.php sql injectionEPSS 0.6%CVE-2024-5396MEDIUMitsourcecode Online Student Enrollment System newfaculty.php sql injectionEPSS 0.6%CVE-2024-6192MEDIUMitsourcecode Loan Management System Login Page login.php sql injectionEPSS 0.6%CVE-2024-5394MEDIUMitsourcecode Online Student Enrollment System newDept.php sql injectionEPSS 0.6%CVE-2024-5588MEDIUMitsourcecode Learning Management System processscore.php sql injectionEPSS 0.6%CVE-2024-6042MEDIUMitsourcecode Real Estate Management System property-detail.php sql injectionEPSS 0.6%CVE-2024-5390MEDIUMitsourcecode Online Student Enrollment System listofstudent.php sql injectionEPSS 0.6%CVE-2024-7446MEDIUMitsourcecode Ticket Reservation System list_tickets.php sql injectionEPSS 0.6%CVE-2024-6728MEDIUMitsourcecode Tailoring Management System typeedit.php sql injectionEPSS 0.6%CVE-2024-7936MEDIUMitsourcecode Project Expense Monitoring System transferred_report.php sql injectionEPSS 0.6%CVE-2024-6372MEDIUMitsourcecode Tailoring Management System customeradd.php sql injectionEPSS 0.6%CVE-2024-7937MEDIUMitsourcecode Project Expense Monitoring System printtransfer.php sql injectionEPSS 0.6%CVE-2024-5898MEDIUMitsourcecode Payroll Management System print_payroll.php sql injectionEPSS 0.6%CVE-2024-6453MEDIUMitsourcecode Farm Management System sql injectionEPSS 0.6%CVE-2024-6734MEDIUMitsourcecode Tailoring Management System templateadd.php sql injectionEPSS 0.6%