Browse CVEs

MEDIUM 6.3 CVE-2026-8786 A vulnerability has been found in Tencent WeKnora up to 0.3.6. Affected by this issue is the function getKnowledgeBaseForInitialization of the file i… Weknora after 0.3.6 Fix from $1,6002026-05-18 HIGH 7.5 CVE-2026-5585 A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/task_manager.go of … Ai Infra Guard No fix yet Fix from $1,9502026-04-05 CRITICAL 9.8 CVE-2026-30860 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a remote code execution… Weknora 0.2.12+ Fix from $2,3002026-03-07 HIGH 8.8 CVE-2026-30855 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.2, an authorization bypass … Weknora 0.3.2+ Fix from $1,9502026-03-07 HIGH 8.8 CVE-2026-30861 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. From version 0.2.5 to before version 0.2.10, an … Weknora 0.2.10+ Fix from $1,9502026-03-07 HIGH 7.6 CVE-2026-30856 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a vulnerability involvi… Weknora 0.3.0+ Fix from $1,9502026-03-07 HIGH 7.5 CVE-2026-30858 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a DNS rebinding vulnerab… Weknora 0.3.0+ Fix from $1,9502026-03-07 MEDIUM 6.5 CVE-2026-30859 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, a broken access control… Weknora 0.2.12+ Fix from $1,6002026-03-07 MEDIUM 5.3 CVE-2026-30857 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.3.0, a cross-tenant authoriza… Weknora 0.3.0+ Fix from $1,6002026-03-07 HIGH 7.5 CVE-2026-30247 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.12, the application's "Impo… Weknora 0.2.12+ Fix from $1,9502026-03-07 HIGH 7.4 CVE-2025-63946 A privilege escalation (PE) vulnerability in the Tencent PC Manager app thru 17.10.28554.205 on Windows devices enables a local user to execute progr… Pcmanager after 17.10.28554.205 Fix from $1,9502026-02-23 HIGH 7.4 CVE-2025-63945 A privilege escalation (PE) vulnerability in the Tencent iOA app thru 210.9.28693.621001 on Windows devices enables a local user to execute programs … Ioa 210.9.28693.62001+ Fix from $1,9502026-02-23 CRITICAL 9.8 CVE-2026-22687 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, after WeKnora enables th… Weknora 0.2.5+ Fix from $2,3002026-01-10 HIGH 8.8 CVE-2026-22688 WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injec… Weknora 0.2.5+ Fix from $1,9502026-01-10 HIGH 7.8 CVE-2025-13709 Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to… Tface 2025-09-29+ Fix from $1,9502025-12-23 HIGH 7.8 CVE-2025-13711 Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit… Tface 2025-09-29+ Fix from $1,9502025-12-23 HIGH 7.5 CVE-2025-56230 Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component. Docs after 3.9.20 Fix from $1,9502025-11-04 CRITICAL 9.8 CVE-2025-11046 A security flaw has been discovered in Tencent WeKnora 0.1.0. This impacts the function testEmbeddingModel of the file /api/v1/initialization/embeddi… Weknora Mitigation only Fix from $2,3002025-09-26 HIGH 8.8 CVE-2024-40433 Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component. Wechat No fix yet Fix from $1,9502024-07-26 MEDIUM 5.3 CVE-2024-34408 Tencent libpag through 4.3.51 has an integer overflow in DecodeStream::checkEndOfFile() in codec/utils/DecodeStream.cpp via a crafted PAG (Portable A… Libpag after 4.3.51 Fix from $1,6002024-05-03 CRITICAL 9.8 CVE-2024-33078 Tencent Libpag v4.3 is vulnerable to Buffer Overflow. A user can send a crafted image to trigger a overflow leading to remote code execution. Libpag Mitigation only Fix from $2,3002024-05-01 HIGH 8.1 CVE-2024-22873 Tencent Blueking CMDB v3.2.x to v3.9.x was discovered to contain a Server-Side Request Forgery (SSRF) via the event subscription function (/service/s… Blueking Configuration Management Database after 3.9.47 Fix from $1,9502024-02-26 HIGH 7.5 CVE-2023-52286 Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/get_db_info r… Tencent Distributed Sql after 1.8.5 Fix from $1,9502023-12-31 HIGH 7.5 CVE-2023-40829 There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x and 2.6.930000. Enterprise Wechat Privatization Mitigation only Fix from $1,9502023-10-12 MEDIUM 5.4 CVE-2023-39988 Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in 标准云(std.Cloud) WxSync plugin <= 2.7.23 versions. Wxsync after 2.7.23 Fix from $1,6002023-09-04 HIGH 7.8 CVE-2023-34312 In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process comm… Qq after 9.7.8.29039 Fix from $1,9502023-06-01 CRITICAL 9.8 CVE-2023-30363 vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts. Vconsole No fix yet Fix from $2,3002023-04-26 HIGH 7.5 CVE-2022-35158 A vulnerability in the lua parser of TscanCode tsclua v2.15.01 allows attackers to cause a Denial of Service (DoS) via a crafted lua script. Tscancode No fix yet Fix from $1,9502022-08-03 HIGH 7.5 CVE-2021-40180 In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContact… Wechat No fix yet Fix from $1,9502022-07-26 HIGH 7.5 CVE-2021-33057 The QQ application 8.7.1 for Android and iOS does not enforce the permission requirements (e.g., android.permission.ACCESS_FINE_LOCATION) for determi… Qq No fix yet Fix from $1,9502022-07-26