Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

dylanjkotze vulnerabilities

7 published CVEs name dylanjkotze among the affected products.

Newest CVEs

  • CVE-2026-120514

    Zephyr Project Manager <= 3.3.209 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'zpm_profile_picture' Parameter

    dylanjkotze · Zephyr Project Manager

    Medium5.4
  • CVE-2026-76931

    Zephyr Project Manager <= 3.3.205 - Authenticated (Custom+) Stored Cross-Site Scripting via 'message' Parameter

    dylanjkotze · Zephyr Project Manager

    Medium6.4
  • CVE-2025-12496

    Zephyr Project Manager <= 3.3.203 - Authenticated (Custom+) Arbitrary File Read And Server-Side Request Forgery

    dylanjkotze · Zephyr Project Manager

    Medium4.9
  • CVE-2025-10490

    Zephyr Project Manager <= 3.3.202 - Authenticated (Admin+) Stored Cross-Site Scripting

    dylanjkotze · Zephyr Project Manager

    Medium4.4
  • CVE-2024-7624

    Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation

    dylanjkotze · Zephyr Project Manager

    High8.1
  • CVE-2024-7356

    Zephyr Project Manager <= 3.3.100 - Authenticated (Subscriber+) Stored Cross-Site Scripting via filename Parameter

    dylanjkotze · Zephyr Project Manager

    Medium6.4
  • CVE-2022-1822

    Zephyr Project Manager <= 3.2.40 - Reflected Cross-Site Scripting

    dylanjkotze · Zephyr Project Manager

    Medium6.1