By using exploits-db.com you agree to these terms. The site is operated by Garnet Grid Consulting LLC. If you do not agree, please do not use the site.
What This Site Is
Exploits-DB.com is a reference index of publicly disclosed vulnerabilities — CVE identifiers, severity scores, affected vendors, and publication dates, drawn from public sources including the National Vulnerability Database. It is a catalogue and a set of explanatory articles. It is not a repository of attack tooling.
Acceptable Use
This information is published to help defenders find, prioritise, and patch vulnerabilities in systems they are responsible for. You agree not to use anything here to access, disrupt, or damage a system you are not authorised to test. Unauthorised access is a crime in most jurisdictions, and nothing on this site is permission to attempt it.
You also agree not to:
- scrape or bulk-download the index in a way that degrades the service for others;
- resell or redistribute the compiled index as your own product;
- misrepresent the data as a complete or authoritative record of any system's exposure.
No Warranty on Vulnerability Data
Vulnerability data changes, and upstream records are frequently revised, disputed, or withdrawn. We make no warranty that any entry is current, complete, or correct, and you should not treat this site as your sole basis for a security decision. Verify against the vendor advisory and the upstream record before acting. The site is provided "as is," without warranties of any kind.
Limitation of Liability
To the maximum extent permitted by law, Garnet Grid Consulting LLC is not liable for indirect, incidental, or consequential damages arising from use of this site or reliance on its data. The site is supplied free of charge; where liability cannot be excluded by law, it is limited to the minimum permitted.
Cost, and What Is Sold Here
This site is free and there is no paid tier on this domain. Nothing is sold here and we take no payment details. The index is funded by advertising. A separate paid product, Exploit-DB.ai, is governed by its own terms — these do not apply to it.
Intellectual Property
CVE records and vendor advisories are the property of their respective publishers and are reproduced here as factual reference. Our own writing, design, and compilation are the property of Garnet Grid Consulting LLC.
Changes
We may revise these terms; the "Last updated" date marks the change. Continued use after a revision constitutes acceptance.
Contact
[email protected]
Garnet Grid Consulting LLC