LE
Vendor
leepeuker
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-40350 | MO movary leepeuker | 8.8 | Apr 18 | Movary User Management (/settings/users) has Authorization Bypass that Allows Low-Privileged Users to Enumerate All Users and Create Administrator Accounts |
| CVE-2026-40349 | MO movary leepeuker | 8.8 | Apr 18 | Authenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=true |
| CVE-2026-40348 | MO movary leepeuker | 7.7 | Apr 18 | Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probing |
| CVE-2026-23841 | MO movary leepeuker | 6.1 | Jan 19 | Movary vulnerable to Cross-site Scripting with `?categoryCreated=` param |
| CVE-2026-23840 | MO movary leepeuker | 6.1 | Jan 19 | Movary vulnerable to Cross-site Scripting with `?categoryDeleted=` param |
| CVE-2026-23839 | MO movary leepeuker | 6.1 | Jan 19 | Movary vulnerable to Cross-site Scripting with `?categoryUpdated=` param |
| CVE-2025-64115 | MO movary leepeuker | 6.1 | Oct 30 | Movary unvalidated Referer header allows open redirect and phishing |
| CVE-2025-64116 | MO movary leepeuker | 6.1 | Oct 30 | Movary vulnerable to an open redirect |