Vulnerability & Exploit Database

Try Surface Command Get a continuous 360° view of your attack surface

A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. The exploits are all included in the Metasploit framework. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 3,541 - 3,560 of 260,079 in total
WordPress Plugin: product-import-export-for-woo: CVE-2025-1912: Server-Side Request Forgery (SSRF)
Published: March 25, 2025 | Severity: 7
vulnerability
Explore
WordPress Plugin: product-import-export-for-woo: CVE-2025-1911: External Control of File Name or Path
Published: March 25, 2025 | Severity: 3
vulnerability
Explore
WordPress Plugin: profit-products-tables-for-woocommerce: CVE-2025-1514: Improper Input Validation
Published: March 25, 2025 | Severity: 7
vulnerability
Explore
WordPress Plugin: product-import-export-for-woo: CVE-2025-1769: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: March 25, 2025 | Severity: 6
vulnerability
Explore
WordPress Plugin: product-import-export-for-woo: CVE-2025-1913: Deserialization of Untrusted Data
Published: March 25, 2025 | Severity: 8
vulnerability
Explore
WordPress Plugin: boldgrid-backup: CVE-2025-2257: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published: March 25, 2025 | Severity: 8
vulnerability
Explore
WordPress Plugin: newsletters-lite: CVE-2025-2009: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: March 25, 2025 | Severity: 6
vulnerability
Explore
Amazon Linux AMI 2: CVE-2025-27836: Security patch for ghostscript (ALAS-2025-2820)
Published: March 25, 2025 | Severity: 10
vulnerability
Explore
Artifex Ghostscript: (CVE-2025-27835) A buffer overflow occurs when converting glyphs to Unicode in psi/zbfont.c.
Published: March 25, 2025 | Severity: 7
vulnerability
Explore
Artifex Ghostscript: (CVE-2025-27830) A buffer overflow occurs during serialization of DollarBlend in a font, for base/write_t1.c and psi/zfapi.c.
Published: March 25, 2025 | Severity: 7
vulnerability
Explore
Artifex Ghostscript: (CVE-2025-27831) The DOCXWRITE TXTWRITE device has a text buffer overflow via long characters to devices/vector/doc_common.c.
Published: March 25, 2025 | Severity: 10
vulnerability
Explore
Artifex Ghostscript: (CVE-2025-27832) The NPDL device has a Compression buffer overflow for contrib/japanese/gdevnpdl.c.
Published: March 25, 2025 | Severity: 10
vulnerability
Explore
Artifex Ghostscript: (CVE-2025-27834) A buffer overflow occurs via an oversized Type 4 function in a PDF document to pdf/pdf_func.c.
Published: March 25, 2025 | Severity: 7
vulnerability
Explore
Artifex Ghostscript: (CVE-2025-27837) Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for base/gp_mswin.c and base/winrtsup.cpp.
Published: March 25, 2025 | Severity: 10
vulnerability
Explore
SUSE: CVE-2025-2312: SUSE Linux Security Advisory
Published: March 25, 2025 | Severity: 4
vulnerability
Explore
WordPress Plugin: responsive-addons-for-elementor: CVE-2025-2228: Exposure of Sensitive Information to an Unauthorized Actor
Published: March 25, 2025 | Severity: 7
vulnerability
Explore
Amazon Linux AMI: CVE-2025-27836: Security patch for ghostscript (ALAS-2025-1967)
Published: March 25, 2025 | Severity: 10
vulnerability
Explore
Amazon Linux AMI: CVE-2025-27832: Security patch for ghostscript (ALAS-2025-1967)
Published: March 25, 2025 | Severity: 10
vulnerability
Explore
WordPress Plugin: ultimate-blocks: CVE-2025-1312: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: March 25, 2025 | Severity: 5
vulnerability
Explore
Amazon Linux 2023: CVE-2025-27833: Important priority package update for ghostscript
Published: March 25, 2025 | Severity: 5
vulnerability
Explore