Vulnerabilidades en Tencent

33 resultados
Análisis Vexday

Tencent possui 32 vulnerabilidades registradas na base do Vexday, com 3 classificadas como críticas, mas nenhuma sob ataque ativo conhecido até o momento. A fraqueza dominante (CWE-502 - Desserialização de Dados Não Confiáveis) sugere risco estrutural em componentes de processamento de dados; as 3 publicações nos últimos 90 dias indicam atividade de remediação recente, reduzindo o risco imediato.

CVE-2026-30247MEDIUMWeKnora: SSRF via RedirectionEPSS 0.4%CVE-2025-13715HIGHTencent FaceDetection-DSFD resnet Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 0.4%CVE-2024-38517MEDIUMTencent RapidJSON include/rapidjson/reader.h GenericReader::ParseNumber() Function Template Exponent Parsing Integer UnderflowEPSS 0.4%CVE-2026-22687MEDIUMWeKnora vulnerable to SQL InjectionEPSS 0.4%CVE-2026-30858MEDIUMWeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal ResourcesEPSS 0.4%CVE-2026-30855HIGHWeKnora: Broken Access Control in Tenant ManagementEPSS 0.3%CVE-2026-8786MEDIUMTencent WeKnora Config API Endpoint initialization.go getKnowledgeBaseForInitialization authorizationEPSS 0.3%CVE-2026-30856MEDIUMWeKnora: Tool Execution Hijacking via Ambigous Naming Convention In MCP client and Indirect Prompt InjectionEPSS 0.3%CVE-2026-30857MEDIUMWeKnora: Unauthorized Cross‑Tenant Knowledge Base CloningEPSS 0.2%CVE-2026-30859MEDIUMWeKnora: Broken Access Control - Cross-Tenant Data ExposureEPSS 0.2%CVE-2026-15515HIGHTencent PC Manager QMUDisk Driver qmudisk64.sys uncontrolled search pathEPSS 0.1%CVE-2026-50144HIGHncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter idEPSS 0.1%CVE-2026-72565CRITICALTencent APIJSON - Unauthenticated SQL Injection via @having Operator Map-Form BypassEPSS —