Vulnerabilidades en itsourcecode

586 resultados
Análisis Vexday

Com 539 CVEs catalogadas e 58 surgidas nos últimos 90 dias, o volume de vulnerabilidades associadas a produtos do itsourcecode apresenta uma cadência de descoberta elevada e recente que merece acompanhamento contínuo. Nenhuma entrada consta no catálogo KEV da CISA — taxa abaixo da média geral —, e os scores EPSS registrados permanecem baixos, incluindo o da CVE-2025-0944, apontada como a mais crítica no momento, com EPSS de 0,0096. Apesar da ausência de exploração ativa confirmada, a presença de 59 CVEs com PoC pública amplia a superfície de risco potencial, já que provas de conceito facilitam a conversão de vulnerabilidades teóricas em ataques reais. O predomínio de CWE-89 (SQL Injection) como tipo de falha mais recorrente indica deficiências sistemáticas na camada de acesso a dados, sugerindo que revisões de código centradas em sanitização de entrada e uso de consultas parametrizadas devem ser priorizadas.

CVE-2026-2689MEDIUMitsourcecode Event Management System manage_booking.php sql injectionEPSS 0.6%CVE-2025-9419MEDIUMitsourcecode Apartment Management System addunit.php sql injectionEPSS 0.6%CVE-2024-6196MEDIUMitsourcecode Banking Management System admin_class.php sql injectionEPSS 0.6%CVE-2024-6733MEDIUMitsourcecode Tailoring Management System templateedit.php sql injectionEPSS 0.6%CVE-2024-7321MEDIUMitsourcecode Online Blood Bank Management System User Registration signup.php cross site scriptingEPSS 0.6%CVE-2025-4195MEDIUMitsourcecode Gym Management System ajax.php sql injectionEPSS 0.6%CVE-2025-4193MEDIUMitsourcecode Restaurant Management System category_update.php sql injectionEPSS 0.6%CVE-2025-4192MEDIUMitsourcecode Restaurant Management System category_save.php sql injectionEPSS 0.6%CVE-2024-7499MEDIUMitsourcecode Airline Reservation System flights.php sql injectionEPSS 0.6%CVE-2024-12784MEDIUMitsourcecode Vehicle Management System editbill.php sql injectionEPSS 0.5%CVE-2025-9420MEDIUMitsourcecode Apartment Management System addfloor.php sql injectionEPSS 0.5%CVE-2025-9421MEDIUMitsourcecode Apartment Management System addcomplain.php sql injectionEPSS 0.5%CVE-2025-9418MEDIUMitsourcecode Apartment Management System addowner.php sql injectionEPSS 0.5%CVE-2024-6952MEDIUMitsourcecode University Management System sql injectionEPSS 0.5%CVE-2024-5393MEDIUMitsourcecode Online Student Enrollment System listofcourse.php sql injectionEPSS 0.5%CVE-2024-7190MEDIUMitsourcecode Society Management System get_price.php sql injectionEPSS 0.5%CVE-2024-7195MEDIUMitsourcecode Society Management System check_admin.php sql injectionEPSS 0.5%CVE-2024-11074MEDIUMitsourcecode Tailoring Management System incadd.php sql injectionEPSS 0.5%CVE-2025-10673MEDIUMitsourcecode Student Information Management System index.php sql injectionEPSS 0.5%CVE-2025-9154MEDIUMitsourcecode Online Tour and Travel Management System page-login.php sql injectionEPSS 0.5%