Browse CVEs

HIGH 7.5 CVE-2026-5585 A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/task_manager.go of … Ai Infra Guard No fix yet Fix from $1,9502026-04-05 CRITICAL 9.8 CVE-2025-11046 A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embeddi… Weknora Mitigation only Fix from $2,3002025-09-26 HIGH 8.8 CVE-2024-40433 Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component. Wechat No fix yet Fix from $1,9502024-07-26 CRITICAL 9.8 CVE-2024-33078 Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code execution. Libpag Mitigation only Fix from $2,3002024-05-01 HIGH 7.5 CVE-2023-40829 There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x and 2.6.930000. Enterprise Wechat Privatization Mitigation only Fix from $1,9502023-10-12 CRITICAL 9.8 CVE-2023-30363 vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts. Vconsole No fix yet Fix from $2,3002023-04-26 HIGH 7.5 CVE-2022-35158 A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a crafted lua script. Tscancode No fix yet Fix from $1,9502022-08-03 HIGH 7.5 CVE-2021-40180 In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContact… Wechat No fix yet Fix from $1,9502022-07-26 HIGH 7.5 CVE-2021-33057 The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACCESS_FINE_LOCATION) for determi… Qq No fix yet Fix from $1,9502022-07-26 CRITICAL 9.8 CVE-2021-27439 TencentOS-tiny version 3.1.0 is vulnerable to integer wrap-around in function 'tos_mmheap_alloc incorrect calculation of effective memory allocation … Tencentos Tiny Mitigation only Fix from $2,3002022-05-03 MEDIUM 6.5 CVE-2021-27247EPSS 6% This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User … Wechat Mitigation only Fix from $1,6002021-04-14 HIGH 8.8 CVE-2020-27874 This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent WeChat 7.0.18. User interaction is required… Wechat Mitigation only Fix from $1,9502021-02-10 HIGH 7.8 CVE-2020-24160 Shenzhen Tencent TIM Windows client 3.0.0.21315 has a DLL hijacking vulnerability, which can be exploited by attackers to execute malicious code. Tim Mitigation only Fix from $1,9502020-09-03 HIGH 7.8 CVE-2020-24162 The Shenzhen Tencent app 5.8.2.5300 for PC platforms (from Tencent App Center) has a DLL hijacking vulnerability. Attackers can use this vulnerabilit… Tencent Mitigation only Fix from $1,9502020-09-03 HIGH 8.8 CVE-2018-11616 This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is re… Foxmail Mitigation only Fix from $1,9502018-08-30 HIGH 7.5 CVE-2018-13439 WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL. Wechat Pay No fix yet Fix from $1,9502018-07-08 MEDIUM 5.8 CVE-2011-4863 The Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly protect data, which allows remote attackers to read… Qqpimsecure Mitigation only Fix from $1,6002012-01-25 MEDIUM 5.8 CVE-2011-4864 The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect data, which allows remote attackers to read or modi… Mobileqq Mitigation only Fix from $1,6002012-01-25 MEDIUM 5.8 CVE-2011-4865 The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attacke… Microblogpad Mitigation only Fix from $1,6002012-01-25 MEDIUM 5.8 CVE-2011-4867 The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modif… Qqpphoto Mitigation only Fix from $1,6002012-01-25