Vulnerability & Exploit Database

Try Surface Command Get a continuous 360° view of your attack surface

A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. The exploits are all included in the Metasploit framework. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 9,481 - 9,500 of 257,730 in total
Huawei EulerOS: CVE-2025-0624: grub2 security update
Published: February 19, 2025 | Severity: 6
vulnerability
Explore
Red Hat OpenShift: CVE-2025-0624: grub2: net: Out-of-bounds write in grub_net_search_config_file()
Published: February 19, 2025 | Severity: 6
vulnerability
Explore
WordPress Plugin: easy-login-woocommerce: CVE-2025-1064: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 19, 2025 | Severity: 5
vulnerability
Explore
Debian: CVE-2024-45777: grub2 -- security update
Published: February 19, 2025 | Severity: 7
vulnerability
Explore
Microsoft Edge Chromium: CVE-2025-1426 Heap buffer overflow in GPU
Published: February 19, 2025 | Severity: 9
vulnerability
Explore
Microsoft Edge Chromium: CVE-2025-1006 Use after free in Network
Published: February 19, 2025 | Severity: 9
vulnerability
Explore
WordPress Plugin: wpappninja: CVE-2024-13888: URL Redirection to Untrusted Site ('Open Redirect')
Published: February 19, 2025 | Severity: 6
vulnerability
Explore
FreeBSD: (Multiple Advisories) (CVE-2025-0999): electron{32,33} -- multiple vulnerabilities
Published: February 19, 2025 | Severity: 10
vulnerability
Explore
Debian: CVE-2025-1006: chromium -- security update
Published: February 19, 2025 | Severity: 9
vulnerability
Explore
SUSE: CVE-2025-0999: SUSE Linux Security Advisory
Published: February 19, 2025 | Severity: 9
vulnerability
Explore
WordPress Plugin: prime-addons-for-elementor: CVE-2024-13855: Improper Access Control
Published: February 19, 2025 | Severity: 4
vulnerability
Explore
WordPress Plugin: social-warfare: CVE-2025-26973: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 19, 2025 | Severity: 7
vulnerability
Explore
WordPress Plugin: modal-window: CVE-2025-0897: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 19, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: ultimate-classified-listings: CVE-2024-13753: Cross-Site Request Forgery (CSRF)
Published: February 19, 2025 | Severity: 9
vulnerability
Explore
WordPress Plugin: ultimate-classified-listings: CVE-2024-13748: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 19, 2025 | Severity: 3
vulnerability
Explore
WordPress Plugin: custom-post-widget: CVE-2024-6432: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 19, 2025 | Severity: 5
vulnerability
Explore
WordPress Plugin: bandsintown: CVE-2024-13802: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: February 19, 2025 | Severity: 5
vulnerability
Explore
Huawei EulerOS: CVE-2024-45777: grub2 security update
Published: February 19, 2025 | Severity: 7
vulnerability
Explore
FreeBSD: (Multiple Advisories) (CVE-2025-1426): qt6-webengine -- Multiple vulnerabilities
Published: February 19, 2025 | Severity: 10
vulnerability
Explore
FreeBSD: (Multiple Advisories) (CVE-2025-1006): qt6-webengine -- Multiple vulnerabilities
Published: February 19, 2025 | Severity: 10
vulnerability
Explore