Priority HIGH 82
vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and value resolution in setOptions in core.ts.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00965 · Published 2023-04-26 · Fixed in 3.15.1 CWE-1321
Priority HIGH 76
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.02378 · Published 2026-03-07 · Fixed in 0.2.10 CWE-78
Priority HIGH 76
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.00735 · Published 2026-03-07 · Fixed in 0.2.12 CWE-89
Priority HIGH 76
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1CRITICAL 10.0· Network · Low privileges · No interaction · EPSS 0.01936 · Published 2026-01-10 · Fixed in 0.2.5 CWE-77
Priority HIGH 75
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00383 · Published 2026-01-10 · Fixed in 0.2.5 CWE-89
Priority HIGH 73
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00377 · Published 2026-03-07 · Fixed in 0.3.2 CWE-284
Priority HIGH 73
Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01175 · Published 2024-07-26 · No fix listed CWE-266
Priority HIGH 72
Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/get_db_info request, a related issue to CVE-2023-42387.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00819 · Published 2023-12-31 · No fix listed CWE-200
Priority HIGH 72
There is an interface unauthorized access vulnerability in the background of Tencent Enterprise Wechat Privatization 2.5.x and 2.6.930000.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00554 · Published 2023-10-12 · No fix listed CWE-863
Priority HIGH 70
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00304 · Published 2026-10-27 · No fix listed CWE-119
Priority HIGH 70
A security flaw has been discovered in Tencent WeKnora 0.1.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00473 · Published 2025-09-26 · No fix listed CWE-918
Priority HIGH 69
In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.22084, QQProtect.exe and QQProtectEngine.dll do not validate pointers from inter-process communication, which leads to a write-what-where condition.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00598 · Published 2023-06-01 · No fix listed CWE-763
Priority HIGH 67
A security vulnerability has been detected in Tencent PC Manager 18.1.30242.301.
CVSS 4.0HIGH 7.3· Local · Low privileges · No interaction · EPSS 0.0016 · Published 2026-07-13 · No fix listed CWE-426
Priority HIGH 66
ncnn is a high-performance neural network inference framework optimized for the mobile platform.
CVSS 3.1HIGH 7.1· Local · No auth · User interaction · EPSS 0.00161 · Published 2026-07-15 · Fixed in 5a0288f255daa6c3294f77109f67718e434ec020 CWE-129
Priority HIGH 66
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00407 · Published 2026-03-07 · Fixed in 0.3.0 CWE-918
Priority HIGH 66
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1HIGH 7.6· Network · No auth · User interaction · EPSS 0.0029 · Published 2026-03-07 · Fixed in 0.3.0 CWE-706
Priority HIGH 66
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00428 · Published 2026-03-07 · Fixed in 0.2.12 CWE-918
Priority HIGH 66
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00231 · Published 2025-11-04 · No fix listed CWE-599
Priority MEDIUM 64
WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00436 · Published 2026-09-15 · Fixed in 0.7.0 CWE-918
Priority MEDIUM 64
Tencent AI-Infra-Guard's skill-scan component excludes compiled Python bytecode files from analysis by hardcoding __pycache__ directories and .pyc/.pyo/.pyd extensions into skip lists across multiple scanning surfaces.
CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.00572 · Published 2026-09-02 · Fixed in 4.5.2 CWE-693
Priority MEDIUM 64
A vulnerability was found in Tencent AI-Infra-Guard 4.0.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00652 · Published 2026-04-05 · No fix listed CWE-200
Priority MEDIUM 62
WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00242 · Published 2026-03-07 · Fixed in 0.2.12 CWE-284
Priority MEDIUM 57
A security flaw has been discovered in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0024 · Published 2026-10-19 · No fix listed CWE-189
Priority MEDIUM 57
A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.0024 · Published 2026-10-19 · No fix listed CWE-119
Priority MEDIUM 57
A security vulnerability has been detected in Tencent WeKnora up to 0.8.1.
CVSS 4.0MEDIUM 5.3· Network · Low privileges · No interaction · EPSS 0.0024 · Published 2026-10-12 · Fixed in 0.8.2 CWE-74
Load more
THREATIST.IORead the docs