leepeuker vulnerabilities
8 published CVEs name leepeuker among the affected products.
- 8Published CVEs8 of them scored
- 6Last 12 monthspublished in the last year
- 3Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-40350
Movary User Management (/settings/users) has Authorization Bypass that Allows Low-Privileged Users to Enumerate All Users and Create Administrator Accounts
leepeuker · movary
High8.8 - CVE-2026-40349
Authenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=true
leepeuker · movary
High8.8 - CVE-2026-40348
Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probing
leepeuker · movary
High7.7 - CVE-2026-23841
Movary vulnerable to Cross-site Scripting with `?categoryCreated=` param
leepeuker · movary
Critical9.3 - CVE-2026-23840
Movary vulnerable to Cross-site Scripting with `?categoryDeleted=` param
leepeuker · movary
Critical9.3 - CVE-2026-23839
Movary vulnerable to Cross-site Scripting with `?categoryUpdated=` param
leepeuker · movary
Critical9.3 - CVE-2025-64115
Movary unvalidated Referer header allows open redirect and phishing
leepeuker · movary
Medium5.1 - CVE-2025-64116
Movary vulnerable to an open redirect
leepeuker · movary
Medium5.1