LE
Vendor
lenve
11
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-110217 | VH vhr lenve | 6.5 | Oct 13 | vhr through commit 03abbd3 Information Disclosure of Operator Password Hashes via GET /chat/hrs |
| CVE-2026-90501 | VH vhr lenve | 6.3 | Sep 13 | lenve vhr HrMapper.xml HrInfoController.updateHr privileges management |
| CVE-2026-90500 | VH vhr lenve | 6.3 | Sep 13 | lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload |
| CVE-2026-90499 | VH vhr lenve | 5.4 | Sep 13 | lenve vhr Password Update pass HrInfoController.updatePass improper authorization |
| CVE-2026-90498 | VH vhr lenve | 7.3 | Sep 13 | lenve vhr vhr.sql default credentials |
| CVE-2026-90490 | VH vhr lenve | 6.3 | Sep 13 | lenve vhr MailReceiver deserialization |
| CVE-2026-85214 | VH vhr lenve | 8.1 | Sep 3 | vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite |
| CVE-2026-85182 | VH vhr lenve | 7.5 | Sep 3 | vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change |
| CVE-2025-3398 | VB Vblog Lenve | 9.8 | Apr 8 | A vulnerability classified as critical was found in lenve VBlog up to 1.0.0 |
| CVE-2025-2364 | VB Vblog Lenve | 5.4 | Mar 17 | A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0 |
| CVE-2025-2363 | VB Vblog Lenve | 9.8 | Mar 17 | A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0 |