INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h Global malware Financial Services, Cryptocurrency CRITICAL 44m Global general Financial Services and E-commerce MEDIUM 47m Global data_breach Social Media and Communications CRITICAL 1h Global general Cybersecurity Operations HIGH 1h Global phishing Technology and Consumer Services HIGH 1h Global data_breach Multiple sectors HIGH 2h Global vulnerability Government and Critical Infrastructure CRITICAL 2h Global vulnerability Multiple sectors CRITICAL 2h Global apt Financial Services, Government HIGH 2h Global insider Cross-sector CRITICAL 3h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2019-25546
NetAware 1.20 contains a buffer overflow vulnerability in the Sha…
NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local att…
MEDIUM
6.2
Mar 21, 2026
CVE-2026-33129
H3 is a minimal H(TTP) framework. Versions 2.0.1-beta.0 through 2…
H3 is a minimal H(TTP) framework. Versions 2.0.1-beta.0 through 2.0.0-rc.8 contain a Timing Side-Cha…
MEDIUM
5.9
Mar 20, 2026
CVE-2025-15597
A vulnerability has been found in Dataease SQLBot up to 1.4.0. Th…
A vulnerability has been found in Dataease SQLBot up to 1.4.0. This affects an unknown function of t…
MEDIUM
6.3
Mar 2, 2026
CVE-2026-3302
A weakness has been identified in SourceCodester Doctor Appointme…
A weakness has been identified in SourceCodester Doctor Appointment System 1.0. Affected by this iss…
MEDIUM
4.3
Feb 27, 2026
CVE-2026-3292
A security vulnerability has been detected in jizhiCMS up to 2.5.…
A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll…
MEDIUM
6.3
Feb 27, 2026
CVE-2026-3286
A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/…
A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element i…
MEDIUM
6.3
Feb 27, 2026
CVE-2026-28354
ClipBucket v5 is an open source video sharing platform. Prior to …
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, collection item …
MEDIUM
6.5
Feb 27, 2026
CVE-2026-28338
PMD is an extensible multilanguage static code analyzer. Prior to…
PMD is an extensible multilanguage static code analyzer. Prior to version 7.22.0, PMD's `vbhtml` and…
MEDIUM
6.8
Feb 27, 2026
CVE-2026-27824
calibre is a cross-platform e-book manager for viewing, convertin…
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.…
MEDIUM
5.3
Feb 27, 2026
CVE-2026-27810
calibre is a cross-platform e-book manager for viewing, convertin…
calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.…
MEDIUM
6.4
Feb 27, 2026
CVE-2026-26997
ClipBucket v5 is an open source video sharing platform. Prior to …
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 #59, a normal authent…
MEDIUM
5.4
Feb 27, 2026
CVE-2026-3263
A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Ord…
A vulnerability was found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.202501…
MEDIUM
6.3
Feb 26, 2026
CVE-2026-3262
A vulnerability has been found in go2ismail Asp.Net-Core-Inventor…
A vulnerability has been found in go2ismail Asp.Net-Core-Inventory-Order-Management-System up to 9.2…
MEDIUM
6.3
Feb 26, 2026
CVE-2026-28208
Junrar is an open source java RAR archive library. Prior to versi…
Junrar is an open source java RAR archive library. Prior to version 7.5.8, a backslash path traversa…
MEDIUM
5.9
Feb 26, 2026
CVE-2026-28207
Zen C is a systems programming language that compiles to human-re…
Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version …
MEDIUM
6.6
Feb 26, 2026
CVE-2026-27963
Audiobookshelf is a self-hosted audiobook and podcast server. A s…
Audiobookshelf is a self-hosted audiobook and podcast server. A stored cross-site scripting (XSS) vu…
MEDIUM
4.8
Feb 26, 2026
CVE-2026-27839
wger is a free, open-source workout and fitness manager. In versi…
wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, three …
MEDIUM
4.3
Feb 26, 2026
CVE-2026-27835
wger is a free, open-source workout and fitness manager. In versi…
wger is a free, open-source workout and fitness manager. In versions up to and including 2.4, `Repet…
MEDIUM
4.3
Feb 26, 2026
CVE-2026-2957
A weakness has been identified in qinming99 dst-admin up to 1.5.0…
A weakness has been identified in qinming99 dst-admin up to 1.5.0. This impacts the function deleteB…
MEDIUM
5.4
Feb 22, 2026
CVE-2026-2956
A security flaw has been discovered in qinming99 dst-admin up to …
A security flaw has been discovered in qinming99 dst-admin up to 1.5.0. This affects the function re…
MEDIUM
6.3
Feb 22, 2026
CVE-2026-2953
A vulnerability has been found in Dromara UJCMS 101.2. This issue…
A vulnerability has been found in Dromara UJCMS 101.2. This issue affects the function deleteDirecto…
MEDIUM
5.4
Feb 22, 2026
CVE-2026-2898
A vulnerability was detected in funadmin up to 7.1.0-rc4. This is…
A vulnerability was detected in funadmin up to 7.1.0-rc4. This issue affects the function getMember …
MEDIUM
5.5
Feb 22, 2026
CVE-2026-2894
A vulnerability was identified in funadmin up to 7.1.0-rc4. Affec…
A vulnerability was identified in funadmin up to 7.1.0-rc4. Affected by this vulnerability is the fu…
MEDIUM
5.3
Feb 21, 2026
CVE-2026-27482
Ray is an AI compute engine. In versions 2.53.0 and below, thedas…
Ray is an AI compute engine. In versions 2.53.0 and below, thedashboard HTTP server blocks browser-o…
MEDIUM
5.9
Feb 21, 2026
CVE-2026-27480
Static Web Server (SWS) is a production-ready web server suitable…
Static Web Server (SWS) is a production-ready web server suitable for static web files or assets. In…
MEDIUM
5.3
Feb 21, 2026
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.