ZE
Vendor
ZeroWdd
11
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-2201 | ST studentmanager ZeroWdd | 5.4 | Feb 9 | ZeroWdd studentmanager LeaveController.java addLeave cross site scripting |
| CVE-2025-3587 | ST studentmanager ZeroWdd | 8.8 | Apr 14 | ZeroWdd/code-projects studentmanager getTeacherList improper authorization |
| CVE-2024-13192 | MY myblog ZeroWdd | 5.4 | Jan 8 | ZeroWdd myblog BlogController.java update cross site scripting |
| CVE-2024-13191 | MY myblog ZeroWdd | 9.8 | Jan 8 | ZeroWdd myblog uploadController.java upload unrestricted upload |
| CVE-2024-13190 | MY myblog ZeroWdd | 6.3 | Jan 8 | ZeroWdd myblog BlogMapper.xml xml injection |
| CVE-2024-13189 | MY myblog ZeroWdd | 9.8 | Jan 8 | ZeroWdd myblog MyBlogMvcConfig.java permission |
| CVE-2024-13143 | ST studentmanager ZeroWdd | 5.4 | Jan 5 | ZeroWdd studentmanager PermissionController. java submitAddPermission cross site scripting |
| CVE-2024-13142 | ST studentmanager ZeroWdd | 4.8 | Jan 5 | ZeroWdd studentmanager RoleController. java submitAddRole cross site scripting |
| CVE-2024-13134 | ST studentmanager ZeroWdd | 8.8 | Jan 5 | ZeroWdd studentmanager TeacherController. java editTeacher unrestricted upload |
| CVE-2024-13133 | ST studentmanager ZeroWdd | 8.8 | Jan 5 | ZeroWdd studentmanager StudentController. java editStudent unrestricted upload |
| CVE-2023-39094 | ST Studentmanager Zerowdd | 5.4 | Aug 21 | Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username parameter in the student list function |