TD
Vendor
TDuckCloud
18
CVEs
0
On KEV
4
New 30D
Products
TD7.1
tduck-survey-form
TDuckCloud
10 CVEs0 on KEV4 new
TD9.8
tduck-platform
TDuckCloud
6 CVEs0 on KEV0 new
TD9.8
Tduck
Tduckcloud
1 CVEs0 on KEV0 new
TD9.8
TDuckPro
TDuckCloud
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-111621 | TD tduck-survey-form TDuckCloud | 4.3 | Oct 16 | TDuck Survey Form through 5.3 Missing Authorization via /user/form/setting/{key} |
| CVE-2026-109167 | TD tduck-survey-form TDuckCloud | 4.3 | Oct 12 | TDuck survey form through 6.0 Authorization Bypass via User-Controlled Theme ID in POST /user/form/theme/save |
| CVE-2026-109165 | TD tduck-survey-form TDuckCloud | 4.3 | Oct 12 | TDuck survey form through 6.0 Authorization Bypass via User-Controlled Form Key in POST /user/form/item/batch/create |
| CVE-2026-109164 | TD tduck-survey-form TDuckCloud | 7.1 | Oct 12 | TDuck survey form through 6.0 Authorization Bypass via User-Controlled Submission IDs in POST /user/form/data/delete/{formKey} |
| CVE-2026-100306 | TD tduck-survey-form TDuckCloud | 5.3 | Sep 25 | TDuck survey form through 6.0 Write Password Bypass via Client-Side Enforcement |
| CVE-2026-100305 | TD tduck-survey-form TDuckCloud | 4.3 | Sep 25 | TDuck survey form through 6.0 Fill-In Restriction Bypass via Authenticated Submission Endpoint |
| CVE-2026-100304 | TD tduck-survey-form TDuckCloud | 5.3 | Sep 25 | TDuck survey form 6.0 Information Disclosure via Fail-Open Form Ownership Check |
| CVE-2026-100303 | TD tduck-survey-form TDuckCloud | 5.4 | Sep 25 | TDuck survey form through 6.0 Missing Authorization in Form Theme Management Endpoints |
| CVE-2026-95829 | TD tduck-platform TDuckCloud | 6.3 | Sep 22 | TDuckCloud tduck-platform Pagination Inner Interceptor MybatisPlusConfig.java PaginationInnerInterceptor.concatOrderBy sql injection |
| CVE-2026-92602 | TD tduck-survey-form TDuckCloud | 7.1 | Sep 16 | TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL |
| CVE-2026-92567 | TD tduck-survey-form TDuckCloud | 6.5 | Sep 16 | TDuck survey form through 5.0 Unauthorized Data Modification |
| CVE-2025-57631 | TD Tduck Tduckcloud | 9.8 | Sep 16 | SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module |
| CVE-2025-8756 | TD tduck-platform TDuckCloud | 8.8 | Aug 9 | TDuckCloud tduck-platform manage preHandle improper authorization |
| CVE-2025-7888 | TD tduck-platform TDuckCloud | 9.8 | Jul 20 | TDuckCloud tduck-platform UserFormDataMapper.java UserFormDataMapper sql injection |
| CVE-2025-0558 | TD tduck-platform TDuckCloud | 9.8 | Jan 18 | TDuckCloud tduck-platform QueryProThemeRequest.java QueryProThemeRequest sql injection |
| CVE-2024-8692 | TD TDuckPro TDuckCloud | 9.8 | Sep 11 | TDuckCloud TDuckPro password recovery |
| CVE-2023-51805 | TD Tduck-platform Tduckcloud | 6.5 | Jan 13 | SQL Injection vulnerability in TDuckCLoud tduck-platform v.4.0 allows a remote attacker to obtain sensitive information via the getFormKey parameter in the search function of… |
| CVE-2023-37733 | TD Tduck-platform Tduckcloud | 6.1 | Jul 19 | An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted HTML file |