Lenve vulnerabilities

Products

• Vhr 8
• Vblog 3

Newest

• lenve vhr vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs CVE-2026-110217 7.1 HighOctober 13, 2026
• lenve vhr lenve vhr HrMapper.xml HrInfoController.updateHr privileges management CVE-2026-90501 5.3 MediumSeptember 13, 2026
• lenve vhr lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload CVE-2026-90500 5.3 MediumSeptember 13, 2026
• lenve vhr lenve vhr Password Update pass HrInfoController.updatePass improper authorization CVE-2026-90499 5.3 MediumSeptember 13, 2026
• lenve vhr lenve vhr vhr.sql default credentials CVE-2026-90498 6.9 MediumSeptember 13, 2026
• lenve vhr lenve vhr MailReceiver deserialization CVE-2026-90490 5.3 MediumSeptember 13, 2026
• lenve vhr vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite CVE-2026-85214 7.2 HighSeptember 3, 2026
• lenve vhr vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change CVE-2026-85182 7.7 HighSeptember 3, 2026
• lenve vblog lenve VBlog WebSecurityConfig.java configure access control CVE-2025-3398 5.3 MediumApril 8, 2025
• lenve vblog lenve VBlog ArticleService.java addNewArticle cross site scripting CVE-2025-2364 5.1 MediumMarch 17, 2025
• lenve vblog lenve VBlog ArticleController.java uploadImg path traversal CVE-2025-2363 5.3 MediumMarch 17, 2025