Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Vendor: WisdomGarden Clear all filters
TI-2026-73881 CVE-2026-110466 · GHSA-277v-q825-2xgx

Sensitive data exposure in WisdomGarden Tronclass

Priority LOW 24

Tronclass developed by WisdomGarden has a Sensitive Data Exposure vulnerability.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00318 Published 2026-10-14 No fix listed CWE-497
TI-2025-09813 CVE-2025-10719 · GHSA-gprp-wr29-xjm4

WisdomGarden｜Tronclass - Insecure Direct Object Reference

Priority LOW 24

Tronclass developed by WisdomGarden has an Insecure Direct object Reference vulnerability, allowing remote attackers with regular privilege to modify a specific parameter to access other users' files.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2025-09-19 No fix listed CWE-639
TI-2024-06245 CVE-2024-6738 · GHSA-6phm-74mw-7r5r

WisdomGarden Tronclass - Broken Access Control

Priority LOW 30

The tumbnail API of Tronclass from WisdomGarden lacks proper access control, allowing unauthenticated remote attackers to obtain certain specific files by modifying the URL.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00456 Published 2024-07-15 Fixed in 1.69.61976 CWE-284
TI-2023-21953 CVE-2023-41356 · GHSA-gh2c-3f8j-9ph4

WisdomGarden Tronclass ilearn - Path Traversal

Priority LOW 31

NCSIST ManageEngine Mobile Device Manager(MDM) APP's special function has a path traversal vulnerability.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01144 Published 2023-11-03 No fix listed CWE-22