CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

329 matches found

CNNVD•added 2026/03/06 12:00 a.m.•25 views

Rocket.Chat 安全漏洞

Rocket.Chat is a chat software developed by the Rocket.Chat company. There were security vulnerabilities in versions prior to 7.10.8, 7.11.5, 7.12.5, 7.13.4, 8.0.2, 8.1.1, and 8.2.0. These vulnerabilities stemmed from authentication issues within the DDP Streamer service, where two-factor...

9.8CVSS5.8AI score0.00333EPSS

SaveExploits0References2

Positive Technologies•added 2026/03/06 12:00 a.m.•14 views

PT-2026-23735

Name of the Vulnerable Software and Affected Versions Rocket.Chat versions prior to 7.8.6 Rocket.Chat versions prior to 7.9.8 Rocket.Chat versions prior to 7.10.7 Rocket.Chat versions prior to 7.11.4 Rocket.Chat versions prior to 7.12.4 Rocket.Chat versions prior to 7.13.3 Rocket.Chat versions...

9.3CVSS5.9AI score0.00498EPSS

SaveExploits0References13

Tenable Nessus•added 2026/01/16 12:00 a.m.•7 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000737)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000737 advisory. The atalkrecvmsg function in net/appletalk/ddp.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure...

4.9CVSS6.9AI score0.00434EPSS

SaveExploits0References21

OSV•added 2025/12/10 1:58 a.m.•10 views

MAL-2025-192408 Malicious code in ddp-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b1ae70118a343c68fd301dbce7ef05fbdf587541f9d61bd1df8a5048578282a The package ddp-common was found to contain malicious code. Source: ghsa-malware afe6b2223d57e3d32fa4220c3a687d0b70fd8c0047fd4925d4b0e6766ce5420e Any...

6.8AI score

SaveExploits0References1

OSSF Malicious Packages•added 2025/12/10 1:58 a.m.•10 views

Malicious code in ddp-common (npm)

6.9AI score

SaveExploits0References1

Snyk•added 2025/12/10 1:58 a.m.•7 views

Malicious Package

Overview ddp-common is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS6.8AI score

SaveExploits0References2

EUVD•added 2025/12/10 1:58 a.m.•8 views

EUVD-2025-202366

Malicious code in ddp-common npm...

6.6AI score

SaveExploits0References1

EUVD•added 2025/10/03 8:07 p.m.•9 views

EUVD-2023-39746