ZeroWdd records

10 published records for vendor zerowdd.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

10 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
27Monitor	CVE-2024-13189No exploit	ZeroWdd myblog MyBlogMvcConfig.java permissionzerowdd · myblog · CWE-266 Pre-auth	Medium6.9	—	0.6%	Jan 8, 2025
21Monitor	CVE-2024-13191No exploit	ZeroWdd myblog uploadController.java upload unrestricted uploadzerowdd · myblog · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.6%	Jan 8, 2025
21Monitor	CVE-2025-3587No exploit	ZeroWdd/code-projects studentmanager getTeacherList improper authorizationzerowdd · studentmanager · CWE-266	Medium5.3	—	0.5%	Apr 14, 2025
21Monitor	CVE-2023-39094No exploit	Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username paramzerowdd · studentmanager · CWE-79 RCE XSS	Medium5.4	—	0.5%	Aug 21, 2023
21Monitor	CVE-2024-13192No exploit	ZeroWdd myblog BlogController.java update cross site scriptingzerowdd · myblog · CWE-79 XSS	Medium5.3	—	0.4%	Jan 8, 2025
21Monitor	CVE-2024-13134No exploit	ZeroWdd studentmanager TeacherController. java editTeacher unrestricted uploadzerowdd · studentmanager · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.4%	Jan 5, 2025
21Monitor	CVE-2024-13133No exploit	ZeroWdd studentmanager StudentController. java editStudent unrestricted uploadzerowdd · studentmanager · CWE-284 File upload Broken access control (IDOR)	Medium5.3	—	0.4%	Jan 5, 2025
20Monitor	CVE-2024-13142No exploit	ZeroWdd studentmanager RoleController. java submitAddRole cross site scriptingzerowdd · studentmanager · CWE-79 XSS	Medium5.1	—	0.4%	Jan 5, 2025
20Monitor	CVE-2024-13143No exploit	ZeroWdd studentmanager PermissionController. java submitAddPermission cross site scriptingzerowdd · studentmanager · CWE-79 XSS	Medium5.1	—	0.3%	Jan 5, 2025
7Monitor	CVE-2026-2201No exploit	ZeroWdd studentmanager LeaveController.java addLeave cross site scriptingzerowdd · studentmanager · CWE-79 XSS	Low1.9	—	0.2%	Feb 8, 2026

CVE-2024-13189
27Monitor
ZeroWdd myblog MyBlogMvcConfig.java permission
MediumCVSS 6.9No exploitEPSS 1%
- Pre-auth
zerowdd · myblogJan 8, 2025
CVE-2024-13191
21Monitor
ZeroWdd myblog uploadController.java upload unrestricted upload
MediumCVSS 5.3No exploitEPSS 1%
- File upload
- Broken access control (IDOR)
zerowdd · myblogJan 8, 2025
CVE-2025-3587
21Monitor
ZeroWdd/code-projects studentmanager getTeacherList improper authorization
MediumCVSS 5.3No exploitEPSS 1%
zerowdd · studentmanagerApr 14, 2025
CVE-2023-39094
21Monitor
Cross Site Scripting vulnerability in ZeroWdd studentmanager v.1.0 allows a remote attacker to execute arbitrary code via the username param
MediumCVSS 5.4No exploitEPSS 0%
- RCE
- XSS
zerowdd · studentmanagerAug 21, 2023
CVE-2024-13192
21Monitor
ZeroWdd myblog BlogController.java update cross site scripting
MediumCVSS 5.3No exploitEPSS 0%
- XSS
zerowdd · myblogJan 8, 2025
CVE-2024-13134
21Monitor
ZeroWdd studentmanager TeacherController. java editTeacher unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
zerowdd · studentmanagerJan 5, 2025
CVE-2024-13133
21Monitor
ZeroWdd studentmanager StudentController. java editStudent unrestricted upload
MediumCVSS 5.3No exploitEPSS 0%
- File upload
- Broken access control (IDOR)
zerowdd · studentmanagerJan 5, 2025
CVE-2024-13142
20Monitor
ZeroWdd studentmanager RoleController. java submitAddRole cross site scripting
MediumCVSS 5.1No exploitEPSS 0%
- XSS
zerowdd · studentmanagerJan 5, 2025
CVE-2024-13143
20Monitor
ZeroWdd studentmanager PermissionController. java submitAddPermission cross site scripting
MediumCVSS 5.1No exploitEPSS 0%
- XSS
zerowdd · studentmanagerJan 5, 2025
CVE-2026-2201
7Monitor
ZeroWdd studentmanager LeaveController.java addLeave cross site scripting
LowCVSS 1.9No exploitEPSS 0%
- XSS
zerowdd · studentmanagerFeb 8, 2026