Vulnerability & Exploit Database

Try Surface Command Get a continuous 360° view of your attack surface

A curated repository of vetted computer software exploits and exploitable vulnerabilities.

Technical details for over 180,000 vulnerabilities and 4,000 exploits are available for security professionals and researchers to review. The exploits are all included in the Metasploit framework. Our vulnerability and exploit database is updated frequently and contains the most recent security research.

Results 1,881 - 1,900 of 233,210 in total
FreeBSD: VID-1DAA2814-0A6C-11F0-B4E4-2CF05DA270F3 (CVE-2025-2255): Gitlab -- Vulnerabilities
Published: March 26, 2025 | Severity: 9
vulnerability
Explore
Splunk CVE-2025-20232: Risky Command Safeguards Bypass in “/app/search/search“ endpoint through “s“ parameter in Splunk Enterprise
Published: March 26, 2025 | Severity: 7
vulnerability
Explore
FreeBSD: VID-1DAA2814-0A6C-11F0-B4E4-2CF05DA270F3 (CVE-2025-2242): Gitlab -- Vulnerabilities
Published: March 26, 2025 | Severity: 7
vulnerability
Explore
Splunk CVE-2025-20231: Sensitive Information Disclosure in Splunk Secure Gateway App
Published: March 26, 2025 | Severity: 7
vulnerability
Explore
FreeBSD: VID-01A7E1E1-D249-4DD8-9A4A-EF95B5747AFB (CVE-2025-2783): electron{33,34} -- Incorrect handle provided in unspecified circumstances in Mojo
Published: March 26, 2025 | Severity: 8
vulnerability
Explore
FreeBSD: VID-E9B8E519-0D50-11F0-86D8-901B0E934D69 (CVE-2025-30355): py-matrix-synapse -- federation denial of service via malformed events
Published: March 26, 2025 | Severity: 8
vulnerability
Explore
Google Chrome Vulnerability: CVE-2025-2783 Incorrect handle provided in unspecified circumstances in Mojo on Windows
Published: March 26, 2025 | Severity: 9
vulnerability
Explore
SUSE: CVE-2025-2783: SUSE Linux Security Advisory
Published: March 26, 2025 | Severity: 8
vulnerability
Explore
Splunk CVE-2025-20227: Information Disclosure through external content warning modal dialog box bypass in Splunk Enterprise Dashboard Studio
Published: March 26, 2025 | Severity: 4
vulnerability
Explore
Ubuntu: USN-7373-1 (CVE-2025-30232): Exim vulnerability
Published: March 26, 2025 | Severity: 9
vulnerability
Explore
Debian: CVE-2025-31160: atop -- security update
Published: March 26, 2025 | Severity: 7
vulnerability
Explore
Splunk CVE-2025-20228: Maintenance mode state change of App Key Value Store (KVStore) through a Cross-Site Request Forgery (CSRF) in Splunk Enterprise
Published: March 26, 2025 | Severity: 8
vulnerability
Explore
Splunk CVE-2025-20230: Missing Access Control and Incorrect Ownership of Data in App Key Value Store (KVStore) collections in the Splunk Secure Gateway App
Published: March 26, 2025 | Severity: 4
vulnerability
Explore
Splunk CVE-2025-20229: Remote Code Execution through file upload to “$SPLUNK_HOME/var/run/splunk/apptemp“ directory in Splunk Enterprise
Published: March 26, 2025 | Severity: 9
vulnerability
Explore
Splunk CVE-2025-20226: Risky command safeguards bypass in “/services/streams/search“ endpoint through “q“ parameter in Splunk Enterprise
Published: March 26, 2025 | Severity: 7
vulnerability
Explore
FreeBSD: VID-2CAD4541-0F5B-11F0-89F8-411AEFEA0DF9 (CVE-2025-2704): openvpn -- server-side denial-of-service vulnerability with tls-crypt-v2
Published: March 26, 2025 | Severity: 8
vulnerability
Explore
Debian: CVE-2025-27835: ghostscript -- security update
Published: March 25, 2025 | Severity: 6
vulnerability
Explore
Ubuntu: USN-7399-1 (CVE-2025-30219): RabbitMQ Server vulnerability
Published: March 25, 2025 | Severity: 6
vulnerability
Explore
SUSE: CVE-2025-2312: SUSE Linux Security Advisory
Published: March 25, 2025 | Severity: 4
vulnerability
Explore
Ubuntu: USN-7378-1 (CVE-2025-27834): Ghostscript vulnerabilities
Published: March 25, 2025 | Severity: 7
vulnerability
Explore