← Back

Tencent

tencent

46 CVEs • 28 products

Products (28)

Click to collapse
Toggle
Weknora
weknora
12 CVEs
Wechat
wechat
6 CVEs
Tim
tim
2 CVEs
Qq
qq
2 CVEs
Libpag
libpag
2 CVEs
Tface
tface
2 CVEs
Qqpimsecure
qqpimsecure
1 CVE
Mobileqq
mobileqq
1 CVE
Microblogpad
microblogpad
1 CVE
Wblog
wblog
1 CVE
Qqpphoto
qqpphoto
1 CVE
Wechat Pay
wechat_pay
1 CVE
Foxmail
foxmail
1 CVE
Habomalhunter
habomalhunter
1 CVE
Qqbrowser
qqbrowser
1 CVE
Tencent
tencent
1 CVE
Gameloop
gameloop
1 CVE
Tencentos Tiny
tencentos-tiny
1 CVE
Tscancode
tscancode
1 CVE
Vconsole
vconsole
1 CVE
Wxsync
wxsync
1 CVE
Enterprise Wechat Privatization
enterprise_wechat_privatization
1 CVE
Tencent Distributed Sql
tencent_distributed_sql
1 CVE
Blueking Configuration Management Database
blueking_configuration_management_database
1 CVE
Docs
docs
1 CVE
Ioa
ioa
1 CVE
Pcmanager
pcmanager
1 CVE
Ai Infra Guard
ai-infra-guard
1 CVE

CVEs (46)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-11616
1Tencent
1Foxmail
Nov 21, 2024
Aug 30, 2018
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is required to exploit this vulnerability in that the target must visit a ma...Show more
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tencent Foxmail 7.2.9.115. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of URI handlers. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code under the context of the current process. Was ZDI-CAN-5543.Show less
CVE-2018-13439
1Tencent
1Wechat Pay
Nov 21, 2024
Jul 8, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.
CVE-2011-4867
1Tencent
1Qqpphoto
Apr 29, 2026
Jan 25, 2012
N/A· v4
N/A· v3
5.8 MEDIUM· v2
The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application.
CVE-2011-4865
1Tencent
2Microblogpad
Wblog
Apr 29, 2026
Jan 25, 2012
N/A· v4
N/A· v3
5.8 MEDIUM· v2
The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted a...Show more
The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application.Show less
CVE-2011-4864
1Tencent
1Mobileqq
Apr 29, 2026
Jan 25, 2012
N/A· v4
N/A· v3
5.8 MEDIUM· v2
The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application.
CVE-2011-4863
1Tencent
1Qqpimsecure
Apr 29, 2026
Jan 25, 2012
N/A· v4
N/A· v3
5.8 MEDIUM· v2
The Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted applicatio...Show more
The Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application.Show less