📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global supply_chain Software Development and Technology CRITICAL 52m Global general Cloud Security and Technology LOW 1h Global vulnerability Technology and Software Development HIGH 1h Global apt Critical Infrastructure, Telecommunications HIGH 7h Global apt Government and Intelligence HIGH 7h Global vulnerability Web Services and Content Management CRITICAL 11h Global apt Multiple sectors HIGH 12h Global supply_chain Software Development and Technology CRITICAL 13h Global ransomware Multiple sectors CRITICAL 13h Global malware Information Technology / Enterprise HIGH 14h Global supply_chain Software Development and Technology CRITICAL 52m Global general Cloud Security and Technology LOW 1h Global vulnerability Technology and Software Development HIGH 1h Global apt Critical Infrastructure, Telecommunications HIGH 7h Global apt Government and Intelligence HIGH 7h Global vulnerability Web Services and Content Management CRITICAL 11h Global apt Multiple sectors HIGH 12h Global supply_chain Software Development and Technology CRITICAL 13h Global ransomware Multiple sectors CRITICAL 13h Global malware Information Technology / Enterprise HIGH 14h Global supply_chain Software Development and Technology CRITICAL 52m Global general Cloud Security and Technology LOW 1h Global vulnerability Technology and Software Development HIGH 1h Global apt Critical Infrastructure, Telecommunications HIGH 7h Global apt Government and Intelligence HIGH 7h Global vulnerability Web Services and Content Management CRITICAL 11h Global apt Multiple sectors HIGH 12h Global supply_chain Software Development and Technology CRITICAL 13h Global ransomware Multiple sectors CRITICAL 13h Global malware Information Technology / Enterprise HIGH 14h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2025-32433
Erlang/OTP SSH Server Missing Authentication for Critical Functio…
Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability — Erlang Erl…
CRITICAL
9.0
KEV AI Jun 9, 2025
CVE-2025-5419
Google Chromium V8 Out-of-Bounds Read/Write Vulnerability (CVE-20…
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability — Google Chromium V8 contains an out-o…
CRITICAL
9.0
KEV AI Jun 5, 2025
CVE-2025-21479
Qualcomm Multiple Chipsets GPU Micronode Unauthorized Command Exe…
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability — Multiple Qualcomm chipsets contai…
CRITICAL
9.0
KEV AI Jun 3, 2025
CVE-2025-21480
Qualcomm Multiple Chipsets GPU Micronode Unauthorized Command Exe…
Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability — Multiple Qualcomm chipsets contai…
CRITICAL
9.0
KEV AI Jun 3, 2025
CVE-2025-27038
Qualcomm Adreno GPU Use-After-Free Vulnerability in Multiple Chip…
Qualcomm Multiple Chipsets Use-After-Free Vulnerability — Multiple Qualcomm chipsets contain a use-a…
CRITICAL
9.0
KEV AI Jun 3, 2025
CVE-2023-39780
ASUS RT-AX55 Routers OS Command Injection Vulnerability — ASUS RT…
ASUS RT-AX55 Routers OS Command Injection Vulnerability — ASUS RT-AX55 devices contain an OS command…
CRITICAL
9.0
KEV AI Jun 2, 2025
CVE-2024-56145
Craft CMS Code Injection Vulnerability — Craft CMS contains a cod…
Craft CMS Code Injection Vulnerability — Craft CMS contains a code injection vulnerability. Users wi…
CRITICAL
9.0
KEV AI Jun 2, 2025
CVE-2025-35939
Craft CMS External Control of Assumed-Immutable Web Parameter Vul…
Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability — Craft CMS contains an …
CRITICAL
9.0
KEV AI Jun 2, 2025
CVE-2025-3935
ConnectWise ScreenConnect Improper Authentication and ViewState C…
ConnectWise ScreenConnect Improper Authentication Vulnerability — ConnectWise ScreenConnect contains…
CRITICAL
9.0
KEV AI Jun 2, 2025
CVE-2021-32030
ASUS Routers Improper Authentication Vulnerability — ASUS Lyra Mi…
ASUS Routers Improper Authentication Vulnerability — ASUS Lyra Mini and ASUS GT-AC2900 devices conta…
CRITICAL
9.0
KEV AI Jun 2, 2025
CVE-2025-4632
Samsung MagicINFO 9 Server Path Traversal - Arbitrary File Write …
Samsung MagicINFO 9 Server Path Traversal Vulnerability — Samsung MagicINFO 9 Server contains a path…
CRITICAL
9.0
KEV AI May 22, 2025
CVE-2023-38950
ZKTeco BioTime Path Traversal Vulnerability — ZKTeco BioTime cont…
ZKTeco BioTime Path Traversal Vulnerability — ZKTeco BioTime contains a path traversal vulnerability…
CRITICAL
9.0
KEV AI May 19, 2025
CVE-2024-11182
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability — M…
MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability — MDaemon Email Server contains a cros…
CRITICAL
9.0
KEV AI May 19, 2025
CVE-2024-27443
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XS…
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability — Zimbra Collabora…
CRITICAL
9.0
KEV AI May 19, 2025
CVE-2025-27920
Srimax Output Messenger Directory Traversal Vulnerability (CVE-20…
Srimax Output Messenger Directory Traversal Vulnerability — Srimax Output Messenger contains a direc…
CRITICAL
9.0
KEV AI May 19, 2025
CVE-2025-4427
Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulne…
Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability — Ivanti Endpoint Manager …
CRITICAL
9.0
KEV AI May 19, 2025
CVE-2025-4428
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerabilit…
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile …
CRITICAL
9.0
KEV AI May 19, 2025
CVE-2024-12987
DrayTek Vigor Routers OS Command Injection Vulnerability — DrayTe…
DrayTek Vigor Routers OS Command Injection Vulnerability — DrayTek Vigor2960, Vigor300B, and Vigor39…
CRITICAL
9.0
KEV AI May 15, 2025
CVE-2025-42999
SAP NetWeaver Visual Composer Metadata Uploader Deserialization V…
SAP NetWeaver Deserialization Vulnerability — SAP NetWeaver Visual Composer Metadata Uploader contai…
CRITICAL
9.0
KEV AI May 15, 2025
CVE-2025-32756
Fortinet Multiple Products Stack-Based Buffer Overflow - Remote C…
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability — Fortinet FortiFone, FortiVoic…
CRITICAL
9.0
KEV AI May 14, 2025
CVE-2025-30397
Microsoft Windows Scripting Engine Type Confusion Remote Code Exe…
Microsoft Windows Scripting Engine Type Confusion Vulnerability — Microsoft Windows Scripting Engine…
CRITICAL
9.0
KEV AI May 13, 2025
CVE-2025-30400
Microsoft Windows DWM Core Library Use-After-Free Privilege Escal…
Microsoft Windows DWM Core Library Use-After-Free Vulnerability — Microsoft Windows DWM Core Library…
CRITICAL
9.0
KEV AI May 13, 2025
CVE-2025-32701
Microsoft Windows CLFS Driver Use-After-Free Privilege Escalation…
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability — Microsoft Wind…
CRITICAL
9.0
KEV AI May 13, 2025
CVE-2025-32706
Microsoft Windows CLFS Driver Heap-Based Buffer Overflow Privileg…
Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability — Mi…
CRITICAL
9.0
KEV AI May 13, 2025
CVE-2025-32709
Microsoft Windows Ancillary Function Driver for WinSock Use-After…
Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability — Microsoft Win…
CRITICAL
9.0
KEV AI May 13, 2025
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.