Lenve

10 CVEs across 2 Lenve products. Browse Lenve vulnerabilities, severities, and proof-of-concept exploits.

Lenve products with known CVEs

ProductCVEs
Vhr7
Vblog3
Lenve CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-90501Medium6.32026-09-13A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT. This issue affects the function HrInfoController.updateHr of the file HrMapper.xml. Such…
CVE-2026-90500Medium6.32026-09-13A weakness has been identified in lenve vhr 1.0-SNAPSHOT. This vulnerability affects the function FastDFSUtils.upload of the file /hr/userface of the component…
CVE-2026-90499Medium5.42026-09-13A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This affects the function HrInfoController.updatePass of the file /hr/pass of the component Pass…
CVE-2026-90498High7.32026-09-13A vulnerability was identified in lenve vhr 1.0-SNAPSHOT. Affected by this issue is some unknown functionality of the file vhr.sql. The manipulation leads to u…
CVE-2026-90490Medium6.32026-09-13A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT. This issue affects some unknown processing of the component MailReceiver. Performing a manipulat…
CVE-2026-85214High8.12026-09-03vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbitrary HR profiles by supplying any profile ID…
CVE-2026-85182High7.52026-09-03vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to the authenticated caller. Authenticated attackers can change…
CVE-2025-3398Medium6.32025-04-08A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/sr…
CVE-2025-2364Low3.52025-03-17A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogse…
CVE-2025-2363Medium6.32025-03-17A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/s…