vciy

CVEs we hold for Portabilis

Records whose assigning authority named Portabilis as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-4355Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scriptingPortabilis i-Educar
CVE-2026-2064Portabilis i-Educar User Data meusdadod.php cross site scriptingPortabilis i-Educar
CVE-2026-2015Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorizationPortabilis i-Educar
CVE-2025-9760Portabilis i-Educar Matricula API matricula improper authorizationPortabilis i-Educar
CVE-2025-9738Portabilis i-Educar educar_tipo_ensino_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-9724Portabilis i-Educar educar_nivel_ensino_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-9723Portabilis i-Educar educar_tipo_regime_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-9722Portabilis i-Educar educar_tipo_ocorrencia_disciplinar_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-9721Portabilis i-Educar edit cross site scriptingPortabilis i-Educar
CVE-2025-9720Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scriptingPortabilis i-Educar
CVE-2025-9687Portabilis i-Educar processamentoApi improper authorizationPortabilis i-Educar
CVE-2025-9686Portabilis i-Educar Listagem de áreas de conhecimento edit sql injectionPortabilis i-Educar
CVE-2025-9685Portabilis i-Educar Listagem de áreas de conhecimento view sql injectionPortabilis i-Educar
CVE-2025-9684Portabilis i-Educar Formula de Cálculo de Média edit sql injectionPortabilis i-Educar
CVE-2025-9653Portabilis i-Educar Cadastrar projeto educar_projeto_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-9652Portabilis i-Educar Cadastrar tipo de transferência educar_transferencia_tipo_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-9638i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panelPortabilis i-Educar
CVE-2025-9609Portabilis i-Educar consulta improper authorizationPortabilis i-Educar
CVE-2025-9608Portabilis i-Educar Formula de Cálculo de Média view sql injectionPortabilis i-Educar
CVE-2025-9607Portabilis i-Educar Tabelas de Arredondamento view sql injectionPortabilis i-Educar
CVE-2025-9606Portabilis i-Educar agenda_preferencias.php sql injectionPortabilis i-Educar
CVE-2025-9532Portabilis i-Educar view sql injectionPortabilis i-Educar
CVE-2025-9531Portabilis i-Educar Agenda agenda.php sql injectionPortabilis i-Educar
CVE-2025-9236Portabilis i-Educar Tipos de usuàrio educar_tipo_usuario_lst.php sql injectionPortabilis i-Educar
CVE-2025-9109Portabilis i-Diario Password Recovery Endpoint email observable response discrepancyPortabilis i-Diario
CVE-2025-9108Portabilis i-Diario Login Page ui layerPortabilis i-Diario
CVE-2025-9107Portabilis i-Diario search_autocomplete cross site scriptingPortabilis i-Diario
CVE-2025-9106Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-disciplina cross site scriptingPortabilis i-Diario
CVE-2025-9105Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-areas-de-conhecimento cross site scriptingPortabilis i-Diario
CVE-2025-9104Portabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross site scriptingPortabilis i-Diario
CVE-2025-8920Portabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scriptingPortabilis i-Diario
CVE-2025-8919Portabilis i-Diario History objetivos-de-aprendizagem-e-habilidades cross site scriptingPortabilis i-Diario
CVE-2025-8918Portabilis i-Educar Editar educar_instituicao_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8790Portabilis i-Educar API Endpoint pessoa improper authorizationPortabilis i-Educar
CVE-2025-8789Portabilis i-Educar API Endpoint Diario authorizationPortabilis i-Educar
CVE-2025-8788Portabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scriptingPortabilis i-Diario
CVE-2025-8787Portabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scriptingPortabilis i-Diario
CVE-2025-8786Portabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scriptingPortabilis i-Diario
CVE-2025-8785Portabilis i-Educar educar_usuario_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-8784Portabilis i-Educar Cadastrar Vínculo funcionario_vinculo_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8545Portabilis i-Educar educar_motivo_afastamento_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8544Portabilis i-Educar edit cross site scriptingPortabilis i-Educar
CVE-2025-8543Portabilis i-Educar educar_raca_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8542Portabilis i-Educar empresas_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8541Portabilis i-Educar public_uf_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8540Portabilis i-Educar public_municipio_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8539Portabilis i-Educar public_distrito_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8538Portabilis i-Educar novo cross site scriptingPortabilis i-Educar
CVE-2025-8511Portabilis i-Diario Observações diario-de-observacoes cross site scriptingPortabilis i-Diario
CVE-2025-8510Portabilis i-Educar educar_matricula_lst.php Gerar cross site scriptingPortabilis i-Educar
CVE-2025-8509Portabilis i-Educar educar_servidor_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8508Portabilis i-Educar educar_avaliacao_desempenho_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8507Portabilis i-Educar educar_funcao_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-8370Portabilis i-Educar educar_escolaridade_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-8369Portabilis i-Educar educar_avaliacao_desempenho_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-8368Portabilis i-Educar pesquisa_pessoa_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-8367Portabilis i-Educar funcionario_vinculo_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-8366Portabilis i-Educar educar_servidor_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-8365Portabilis i-Educar atendidos_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-8346Portabilis i-Educar educar_aluno_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-7872Portabilis i-Diario justificativas-de-falta cross site scriptingPortabilis i-Diario
CVE-2025-7871Portabilis i-Diario conteudos cross site scriptingPortabilis i-Diario
CVE-2025-7870Portabilis i-Diario justificativas-de-falta Endpoint cross site scriptingPortabilis i-Diario
CVE-2025-7869Portabilis i-Educar Turma Module educar_turma_tipo_det.php cross site scriptingPortabilis i-Educar
CVE-2025-7868Portabilis i-Educar Calendar educar_calendario_dia_motivo_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-7867Portabilis i-Educar Agenda agenda.php cross site scriptingPortabilis i-Educar
CVE-2025-7866Portabilis i-Educar Disabilities Module educar_deficiencia_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-7113Portabilis i-Educar Curricular Components Module edit cross site scriptingPortabilis i-Educar
CVE-2025-7112Portabilis i-Educar Function Management Module educar_funcao_det.php cross site scriptingPortabilis i-Educar
CVE-2025-7111Portabilis i-Educar Course Module educar_curso_det.php cross site scriptingPortabilis i-Educar
CVE-2025-7110Portabilis i-Educar School Module educar_escola_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-7109Portabilis i-Educar Student Benefits Registration educar_aluno_beneficio_lst.php cross site scriptingPortabilis i-Educar
CVE-2025-65024i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`portabilis i-educar
CVE-2025-65023i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`portabilis i-educar
CVE-2025-65022i-Educar Authenticated Time-based SQL Injection in `agenda.php`portabilis i-educar
CVE-2025-11554Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissionsPortabilis i-Educar
CVE-2025-11050Portabilis i-Educar periodo-lancamento improper authorizationPortabilis i-Educar
CVE-2025-11049Portabilis i-Educar unificacao-aluno improper authorizationPortabilis i-Educar
CVE-2025-11048Portabilis i-Educar consulta-dispensas improper authorizationPortabilis i-Educar
CVE-2025-11047Portabilis i-Educar aluno improper authorizationPortabilis i-Educar
CVE-2025-10846Portabilis i-Educar edit sql injectionPortabilis i-Educar
CVE-2025-10845Portabilis i-Educar view sql injectionPortabilis i-Educar
CVE-2025-10844Portabilis i-Educar aluno sql injectionPortabilis i-Educar
CVE-2025-10608Portabilis i-Educar enrollment-history access controlPortabilis i-Educar
CVE-2025-10607Portabilis i-Educar diarioApi information disclosurePortabilis i-Educar
CVE-2025-10606Portabilis i-Educar ConfiguracaoMovimentoGeral cross site scriptingPortabilis i-Educar
CVE-2025-10605Portabilis i-Educar agenda_preferencias.php cross site scriptingPortabilis i-Educar
CVE-2025-10591Portabilis i-Educar Editar Função educar_funcao_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-10590Portabilis i-Educar educar_usuario_det.php cross site scriptingPortabilis i-Educar
CVE-2025-10584Portabilis i-Educar educar_calendario_anotacao_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-10373Portabilis i-Educar educar_turma_tipo_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-10372Portabilis i-Educar educar_modulo_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-10099Portabilis i-Educar Editar usuário educar_usuario_cad.php cross site scriptingPortabilis i-Educar
CVE-2025-10074Portabilis i-Educar tipos cross site scriptingPortabilis i-Educar
CVE-2025-10073Portabilis i-Educar turma improper authorizationPortabilis i-Educar
CVE-2025-10072Portabilis i-Educar enturmar access controlPortabilis i-Educar
CVE-2025-10071Portabilis i-Educar cancelar-enturmacao-em-lote access controlPortabilis i-Educar
CVE-2025-10070Portabilis i-Educar enturmacao-em-lote access controlPortabilis i-Educar
CVE-2025-10013Portabilis i-Educar exportacao-para-o-seb access controlPortabilis i-Educar
CVE-2025-10012Portabilis i-Educar educar_historico_escolar_lst.php sql injectionPortabilis i-Educar
CVE-2025-10011Portabilis i-Educar edit sql injectionPortabilis i-Educar
CVE-2024-55651i-Educar Stored Cross-Site Scripting vulnerabilityportabilis i-educar
CVE-2024-45059Authenticated SQL Injection in i-Educarportabilis i-educar
CVE-2024-45058Privilege escalation in i-Educarportabilis i-educar
CVE-2024-45057Reflected Cross-Site Scripting in i-Educarportabilis i-educar
CVE-2024-12893Portabilis i-Educar Tipo de Usuário Page 2 cross site scriptingPortabilis i-Educar

106 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.