INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global data_breach Government CRITICAL 5h Global ransomware Financial Services / Cybersecurity CRITICAL 5h Global vulnerability Information Technology / Cybersecurity CRITICAL 7h Global malware Energy and Utilities CRITICAL 8h Global ransomware Multiple sectors CRITICAL 8h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 11h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 11h Global phishing Multiple sectors HIGH 12h Global insider Cybersecurity Services CRITICAL 12h Global ransomware Multiple sectors (U.S. companies) CRITICAL 12h Global data_breach Government CRITICAL 5h Global ransomware Financial Services / Cybersecurity CRITICAL 5h Global vulnerability Information Technology / Cybersecurity CRITICAL 7h Global malware Energy and Utilities CRITICAL 8h Global ransomware Multiple sectors CRITICAL 8h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 11h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 11h Global phishing Multiple sectors HIGH 12h Global insider Cybersecurity Services CRITICAL 12h Global ransomware Multiple sectors (U.S. companies) CRITICAL 12h Global data_breach Government CRITICAL 5h Global ransomware Financial Services / Cybersecurity CRITICAL 5h Global vulnerability Information Technology / Cybersecurity CRITICAL 7h Global malware Energy and Utilities CRITICAL 8h Global ransomware Multiple sectors CRITICAL 8h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 11h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 11h Global phishing Multiple sectors HIGH 12h Global insider Cybersecurity Services CRITICAL 12h Global ransomware Multiple sectors (U.S. companies) CRITICAL 12h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2024-44309
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability …
Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability — Apple iOS, macOS, and other Apple…
CRITICAL
9.0
KEV AI Nov 21, 2024
CVE-2024-38812
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability — …
VMware vCenter Server Heap-Based Buffer Overflow Vulnerability — VMware vCenter Server contains a he…
CRITICAL
9.0
KEV AI Nov 20, 2024
CVE-2024-38813
VMware vCenter Server Privilege Escalation Vulnerability — VMware…
VMware vCenter Server Privilege Escalation Vulnerability — VMware vCenter contains an improper check…
CRITICAL
9.0
KEV AI Nov 20, 2024
CVE-2024-0012
Palo Alto Networks PAN-OS Management Interface Authentication Byp…
Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability — Palo Alto Netwo…
CRITICAL
9.0
KEV AI Nov 18, 2024
CVE-2024-1212
Progress Kemp LoadMaster OS Command Injection Vulnerability — Pro…
Progress Kemp LoadMaster OS Command Injection Vulnerability — Progress Kemp LoadMaster contains an O…
CRITICAL
9.0
KEV AI Nov 18, 2024
CVE-2024-9474
Palo Alto Networks PAN-OS Management Interface OS Command Injecti…
Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability — Palo Alto Networ…
CRITICAL
9.0
KEV AI Nov 18, 2024
CVE-2024-9463
Palo Alto Networks Expedition OS Command Injection - Unauthentica…
Palo Alto Networks Expedition OS Command Injection Vulnerability — Palo Alto Networks Expedition con…
CRITICAL
9.0
KEV AI Nov 14, 2024
CVE-2024-9465
Palo Alto Networks Expedition SQL Injection - Unauthenticated Dat…
Palo Alto Networks Expedition SQL Injection Vulnerability — Palo Alto Networks Expedition contains a…
CRITICAL
9.0
KEV AI Nov 14, 2024
CVE-2024-43451
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability —…
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability — Microsoft Windows contains an NTLM…
CRITICAL
9.0
KEV AI Nov 12, 2024
CVE-2024-49039
Microsoft Windows Task Scheduler Privilege Escalation Vulnerabili…
Microsoft Windows Task Scheduler Privilege Escalation Vulnerability — Microsoft Windows Task Schedul…
CRITICAL
9.0
KEV AI Nov 12, 2024
CVE-2021-26086
Atlassian Jira Server and Data Center Path Traversal Vulnerabilit…
Atlassian Jira Server and Data Center Path Traversal Vulnerability — Atlassian Jira Server and Data …
CRITICAL
9.0
KEV AI Nov 12, 2024
CVE-2021-41277
Metabase GeoJSON API Local File Inclusion Vulnerability — Metabas…
Metabase GeoJSON API Local File Inclusion Vulnerability — Metabase contains a local file inclusion v…
CRITICAL
9.0
KEV AI Nov 12, 2024
CVE-2014-2120
Cisco ASA WebVPN XSS Vulnerability Enables Session Hijacking
Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability — Cisco Adaptive Se…
CRITICAL
9.0
KEV AI Nov 12, 2024
CVE-2019-16278
Nostromo nhttpd Directory Traversal Vulnerability — Nostromo nhtt…
Nostromo nhttpd Directory Traversal Vulnerability — Nostromo nhttpd contains a directory traversal v…
CRITICAL
9.0
KEV AI Nov 7, 2024
CVE-2024-43093
Android Framework Privilege Escalation Vulnerability — Android Fr…
Android Framework Privilege Escalation Vulnerability — Android Framework contains an unspecified vul…
CRITICAL
9.0
KEV AI Nov 7, 2024
CVE-2024-51567
CyberPanel Incorrect Default Permissions Vulnerability — CyberPan…
CyberPanel Incorrect Default Permissions Vulnerability — CyberPanel contains an incorrect default pe…
CRITICAL
9.0
KEV AI Nov 7, 2024
CVE-2024-5910
Palo Alto Networks Expedition Missing Authentication Vulnerabilit…
Palo Alto Networks Expedition Missing Authentication Vulnerability — Palo Alto Networks Expedition c…
CRITICAL
9.0
KEV AI Nov 7, 2024
CVE-2024-8956
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerabili…
PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability — PTZOptics PT30X-SDI/NDI camera…
CRITICAL
9.0
KEV AI Nov 4, 2024
CVE-2024-8957
PTZOptics PT30X-SDI/NDI OS Command Injection Vulnerability (CVE-2…
PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability — PTZOptics PT30X-SDI/NDI cameras…
CRITICAL
9.0
KEV AI Nov 4, 2024
CVE-2024-20481
Cisco ASA and FTD Denial-of-Service Vulnerability — Cisco Adaptiv…
Cisco ASA and FTD Denial-of-Service Vulnerability — Cisco Adaptive Security Appliance (ASA) and Fire…
CRITICAL
9.0
KEV AI Oct 24, 2024
CVE-2024-37383
RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability — Roun…
RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability — RoundCube Webmail contains a cross-site…
CRITICAL
9.0
KEV AI Oct 24, 2024
CVE-2024-47575
Fortinet FortiManager Missing Authentication Vulnerability — Fort…
Fortinet FortiManager Missing Authentication Vulnerability — Fortinet FortiManager contains a missin…
CRITICAL
9.0
KEV AI Oct 23, 2024
CVE-2024-38094
Microsoft SharePoint Deserialization Vulnerability — Microsoft Sh…
Microsoft SharePoint Deserialization Vulnerability — Microsoft SharePoint contains a deserialization…
CRITICAL
9.0
KEV AI Oct 22, 2024
CVE-2024-9537
ScienceLogic SL1 Critical Unspecified Vulnerability in Third-Part…
ScienceLogic SL1 Unspecified Vulnerability — ScienceLogic SL1 (formerly EM7) is affected by an unspe…
CRITICAL
9.0
KEV AI Oct 21, 2024
CVE-2024-40711
Veeam Backup and Replication Deserialization Vulnerability — Veea…
Veeam Backup and Replication Deserialization Vulnerability — Veeam Backup and Replication contains a…
CRITICAL
9.0
KEV AI Oct 17, 2024
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.