🛡️ CVE Vulnerability Database
CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia
| CVE ID | Title / Description | Severity | CVSS | Status | Published |
|---|---|---|---|---|---|
| CVE-2009-0238 |
Microsoft Office — CVE-2009-0238
Microsoft Office Excel contains a remote code execution vulnerabili…
|
CRITICAL |
9.8
|
KEV AI | Apr 14, 2026 |
| CVE-2023-21529 |
Microsoft Exchange Server — CVE-2023-21529
Microsoft Exchange Server contains a deserialization of u…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2012-1854 |
Microsoft Visual Basic for Applications (VBA) — CVE-2012-1854
Microsoft Visual Basic for Application…
|
CRITICAL |
9.8
|
KEV AI | Apr 13, 2026 |
| CVE-2026-1340 |
Ivanti Endpoint Manager Mobile (EPMM) — CVE-2026-1340
Ivanti Endpoint Manager Mobile (EPMM) contains…
|
CRITICAL |
9.8
|
KEV AI | Apr 8, 2026 |
| CVE-2025-53521 |
F5 BIG-IP APM Stack-Based Buffer Overflow Remote Code Execution
F5 BIG-IP — CVE-2025-53521
F5 BIG-IP APM contains a stack-based buffer overflow vulnerability that c…
|
CRITICAL |
9.8
|
KEV AI | Mar 27, 2026 |
| CVE-2025-32432 |
Craft CMS Remote Code Execution Vulnerability (CVE-2025-32432)
Craft CMS Craft CMS — CVE-2025-32432
Craft CMS contains a code injection vulnerability that allows a…
|
CRITICAL |
9.8
|
KEV AI | Mar 20, 2026 |
| CVE-2026-20131 |
Cisco Secure Firewall Management Center Unauthenticated Remote Co…
Cisco Secure Firewall Management Center (FMC) — CVE-2026-20131
Cisco Secure Firewall Management Cent…
|
CRITICAL |
9.8
|
KEV AI | Mar 19, 2026 |
| CVE-2025-68613 |
n8n Workflow Expression Evaluation Remote Code Execution (CVE-202…
n8n n8n — CVE-2025-68613
n8n contains an improper control of dynamically managed code resources vuln…
|
CRITICAL |
9.8
|
KEV AI | Mar 11, 2026 |
| CVE-2026-22719 |
VMware Aria Operations contains a command injection vulnerability…
VMware Aria Operations contains a command injection vulnerability. A malicious unauthenticated actor…
|
HIGH |
8.1
|
⚡ ✅ KEV | Feb 25, 2026 |
| CVE-2025-49113 |
RoundCube Webmail Deserialization of Untrusted Data Vulnerability…
RoundCube Webmail Deserialization of Untrusted Data Vulnerability — RoundCube Webmail contains a des…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Feb 20, 2026 |
| CVE-2008-0015 |
Microsoft Windows Video ActiveX Control Remote Code Execution Vul…
Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability — Microsoft Windows Vid…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Feb 17, 2026 |
| CVE-2025-40551 |
SolarWinds Web Help Desk Critical Deserialization Vulnerability E…
SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability — SolarWinds Web Help Desk …
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Feb 3, 2026 |
| CVE-2026-1281 |
Ivanti Endpoint Manager Mobile (EPMM) Unauthenticated Remote Code…
Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability — Ivanti Endpoint Manager Mobile …
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 29, 2026 |
| CVE-2025-52691 |
SmarterTools SmarterMail Critical Unrestricted File Upload Vulner…
SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability — SmarterTool…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 26, 2026 |
| CVE-2024-37079 |
Broadcom VMware vCenter Server Out-of-Bounds Write Vulnerability …
Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability — Broadcom VMware vCenter Server co…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 23, 2026 |
| CVE-2025-8110 |
Gogs Path Traversal Vulnerability Leading to Remote Code Executio…
Gogs Path Traversal Vulnerability — Gogs contains a path traversal vulnerability affecting improper …
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 12, 2026 |
| CVE-2025-37164 |
HPE OneView Critical Code Injection Vulnerability Enabling Remote…
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 7, 2026 |
| CVE-2009-0556 |
Microsoft PowerPoint Remote Code Execution via OutlineTextRefAtom…
Microsoft Office PowerPoint Code Injection Vulnerability — Microsoft Office PowerPoint contains a co…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 7, 2026 |
| CVE-2025-55182 |
Meta React Server Components Remote Code Execution Vulnerability …
Meta React Server Components Remote Code Execution Vulnerability — Meta React Server Components cont…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Dec 5, 2025 |
| CVE-2025-9242 |
WatchGuard Firebox Out-of-Bounds Write Vulnerability Enabling Rem…
WatchGuard Firebox Out-of-Bounds Write Vulnerability — WatchGuard Firebox contains an out-of-bounds …
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 12, 2025 |
| CVE-2025-48703 |
CWP Control Web Panel Critical OS Command Injection Vulnerability…
CWP Control Web Panel OS Command Injection Vulnerability — CWP Control Web Panel (formerly CentOS We…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 4, 2025 |
| CVE-2025-24893 |
XWiki Platform Eval Injection Vulnerability Enabling Remote Code …
XWiki Platform Eval Injection Vulnerability — XWiki Platform contains an eval injection vulnerabilit…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Oct 30, 2025 |
| CVE-2025-59287 |
Microsoft Windows Server Update Service (WSUS) Deserialization Re…
Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability — Mic…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Oct 24, 2025 |
| CVE-2016-7836 |
SKYSEA Client View Improper Authentication Vulnerability — SKYSEA…
SKYSEA Client View Improper Authentication Vulnerability — SKYSEA Client View contains an improper a…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Oct 14, 2025 |
| CVE-2025-61882 |
Oracle E-Business Suite BI Publisher Integration Remote Code Exec…
Oracle E-Business Suite Unspecified Vulnerability — Oracle E-Business Suite contains an unspecified …
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Oct 6, 2025 |