Vulnerabilidades en itsourcecode

586 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2024-8081MEDIUMitsourcecode Payroll Management System login.php sql injectionEPSS 0.6%CVE-2024-7838MEDIUMitsourcecode Online Food Ordering System addcategory.php sql injectionEPSS 0.6%CVE-2024-6109MEDIUMitsourcecode Tailoring Management System addmeasurement.php sql injectionEPSS 0.6%CVE-2024-7275MEDIUMitsourcecode Alton Management System category_save.php sql injectionEPSS 0.6%CVE-2024-7495MEDIUMitsourcecode Laravel Accounting System HomeController.php unrestricted uploadEPSS 0.6%CVE-2024-7276MEDIUMitsourcecode Alton Management System member_save.php sql injectionEPSS 0.6%CVE-2025-9766MEDIUMitsourcecode Sports Management System facilitator.php sql injectionEPSS 0.6%CVE-2024-6735MEDIUMitsourcecode Tailoring Management System setgeneral.php sql injectionEPSS 0.6%CVE-2024-8220MEDIUMitsourcecode Tailoring Management System staffedit.php sql injectionEPSS 0.6%CVE-2024-6956MEDIUMitsourcecode University Management System view_cgpa.php sql injectionEPSS 0.6%CVE-2024-7933MEDIUMitsourcecode Project Expense Monitoring System Backend Login login1.php sql injectionEPSS 0.6%CVE-2024-7913MEDIUMitsourcecode Billing System addclient1.php sql injectionEPSS 0.6%CVE-2024-7191MEDIUMitsourcecode Society Management System get_balance.php sql injectionEPSS 0.6%CVE-2024-7452MEDIUMitsourcecode Placement Management System view_company.php sql injectionEPSS 0.6%CVE-2024-7451MEDIUMitsourcecode Placement Management System apply_now.php sql injectionEPSS 0.6%CVE-2024-8139MEDIUMitsourcecode E-Commerce Website search_list.php sql injectionEPSS 0.6%CVE-2024-8570MEDIUMitsourcecode Tailoring Management System inccatadd.php sql injectionEPSS 0.6%CVE-2024-6191MEDIUMitsourcecode Student Management System Login Page login.php sql injectionEPSS 0.6%CVE-2024-10609MEDIUMitsourcecode Tailoring Management System Project typeadd.php sql injectionEPSS 0.6%CVE-2026-2689MEDIUMitsourcecode Event Management System manage_booking.php sql injectionEPSS 0.6%