Priority MEDIUM 64
Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to retrieve other operators' BCrypt password hashes via GET /chat/hrs.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00577 · Published 2026-10-13 · No fix listed CWE-200
Priority MEDIUM 57
A security vulnerability has been detected in lenve vhr 1.0-SNAPSHOT.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2026-09-13 · No fix listed CWE-266
Priority MEDIUM 57
A weakness has been identified in lenve vhr 1.0-SNAPSHOT.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00347 · Published 2026-09-13 · No fix listed CWE-284
Priority MEDIUM 57
A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00381 · Published 2026-09-13 · No fix listed CWE-266
Priority HIGH 70
A vulnerability was identified in lenve vhr 1.0-SNAPSHOT.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00472 · Published 2026-09-13 · No fix listed CWE-1392
Priority MEDIUM 57
A security flaw has been discovered in lenve vhr 1.0-SNAPSHOT.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.00409 · Published 2026-09-13 · No fix listed CWE-20
Priority HIGH 65
vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing authenticated users to modify arbitrary HR profiles by supplying any profile ID in the request body.
CVSS 4.0HIGH 7.2· Network · Low privileges · No interaction · EPSS 0.00504 · Published 2026-09-03 · No fix listed CWE-639
Priority HIGH 69
vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass requests belongs to the authenticated caller.
CVSS 4.0HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.00443 · Published 2026-09-03 · No fix listed CWE-639
Priority LOW 25
A vulnerability classified as critical was found in lenve VBlog up to 1.0.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0049 · Published 2025-04-08 · No fix listed CWE-266
Priority MEDIUM 56
A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00305 · Published 2025-03-17 · No fix listed CWE-79
Priority MEDIUM 57
A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0066 · Published 2025-03-17 · No fix listed CWE-22
THREATIST.IORead the docs