Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

lenve vulnerabilities

11 published CVEs name lenve among the affected products.

Newest CVEs

  • CVE-2026-110217

    vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs

    lenve · vhr

    High7.1
  • CVE-2026-90501

    lenve vhr HrMapper.xml HrInfoController.updateHr privileges management

    lenve · vhr

    Medium5.3
  • CVE-2026-90500

    lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload

    lenve · vhr

    Medium5.3
  • CVE-2026-90499

    lenve vhr Password Update pass HrInfoController.updatePass improper authorization

    lenve · vhr

    Medium5.3
  • CVE-2026-90498

    lenve vhr vhr.sql default credentials

    lenve · vhr

    Medium6.9
  • CVE-2026-90490

    lenve vhr MailReceiver deserialization

    lenve · vhr

    Medium5.3
  • CVE-2026-85214

    vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite

    lenve · vhr

    High7.2
  • CVE-2026-85182

    vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change

    lenve · vhr

    High7.7
  • CVE-2025-3398

    lenve VBlog WebSecurityConfig.java configure access control

    lenve · VBlog

    Medium5.3
  • CVE-2025-2364

    lenve VBlog ArticleService.java addNewArticle cross site scripting

    lenve · VBlog

    Medium5.1