TI-2026-61516 CVE-2026-90498 · GHSA-qxm6-9q4x-qg96
lenve vhr vhr.sql default credentials
Priority HIGH 70
A vulnerability was identified in lenve vhr 1.0-SNAPSHOT.
lenve
Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
lenve records in CISA KEVNo lenve vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
11 records
TI-2026-58515 CVE-2026-85182 · GHSA-q54m-q6wq-qhwg
vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change
Priority HIGH 69
vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to the authenticated caller.
TI-2026-58540 CVE-2026-85214 · GHSA-w3q5-4jvr-jm6p
vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite
Priority HIGH 65
vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbitrary HR profiles by supplying any profile ID in the request body.
TI-2026-73434 CVE-2026-110217 · GHSA-9r96-j8cv-gv8g
Information disclosure of operator password hashes in Lenve vhr
Priority MEDIUM 64
Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to retrieve other operators' BCrypt password hashes via GET /chat/hrs.
TI-2026-61519 CVE-2026-90501 · GHSA-rx99-9qgv-2g6h
lenve vhr HrMapper.xml HrInfoController.updateHr privileges management
Priority MEDIUM 57
A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT.
TI-2026-61518 CVE-2026-90500 · GHSA-x9fh-7c86-cq87
lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload
Priority MEDIUM 57
A weakness has been identified in lenve vhr 1.0-SNAPSHOT.
TI-2026-61517 CVE-2026-90499 · GHSA-g3rg-5f38-q7q5
lenve vhr Password Update pass HrInfoController.updatePass improper authorization
Priority MEDIUM 57
A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT.
TI-2026-61508 CVE-2026-90490 · GHSA-92fw-p64j-phvm
lenve vhr MailReceiver deserialization
Priority MEDIUM 57
A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT.
TI-2025-02078 CVE-2025-2363 · GHSA-7477-x7rw-jvh6
lenve VBlog ArticleController.java uploadImg path traversal
Priority MEDIUM 57
A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0.
TI-2025-02079 CVE-2025-2364 · GHSA-r2xw-g69f-4fpr
lenve VBlog ArticleService.java addNewArticle cross site scripting
Priority MEDIUM 56
A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0.
TI-2025-02982 CVE-2025-3398 · GHSA-m762-6293-qf93
lenve VBlog WebSecurityConfig.java configure access control
Priority LOW 25
A vulnerability classified as critical was found in lenve VBlog up to 1.0.0.