Tencent: Security Vulnerabilities
WXPayUtil in WeChat Pay Java SDK allows XXE attacks involving a merchant notification URL.
CVSS Score
7.5
EPSS Score
0.004
Published
2018-07-08
The Tencent QQPimSecure (com.tencent.qqpimsecure) application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application.
CVSS Score
5.8
EPSS Score
0.002
Published
2012-01-25
The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application.
CVSS Score
5.8
EPSS Score
0.002
Published
2012-01-25
The Tencent WBlog (com.tencent.WBlog) 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application.
CVSS Score
5.8
EPSS Score
0.002
Published
2012-01-25
The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application.
CVSS Score
5.8
EPSS Score
0.002
Published
2012-01-25
Page 3