INITIALIZING
📧 info@ciso.sa | 📱 +966550939344 | Riyadh, Kingdom of Saudi Arabia
🔧 Scheduled Maintenance — Saturday 2:00-4:00 AM AST. Some features may be temporarily unavailable.    ●   
💎
Pro Plan 50% Off Unlock all AI features, unlimited reports, and priority support. Upgrade
Search Center
ESC to close
Global data_breach Government CRITICAL 2h Global ransomware Financial Services / Cybersecurity CRITICAL 2h Global vulnerability Information Technology / Cybersecurity CRITICAL 4h Global malware Energy and Utilities CRITICAL 5h Global ransomware Multiple sectors CRITICAL 5h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 8h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 8h Global phishing Multiple sectors HIGH 8h Global insider Cybersecurity Services CRITICAL 9h Global ransomware Multiple sectors (U.S. companies) CRITICAL 9h Global data_breach Government CRITICAL 2h Global ransomware Financial Services / Cybersecurity CRITICAL 2h Global vulnerability Information Technology / Cybersecurity CRITICAL 4h Global malware Energy and Utilities CRITICAL 5h Global ransomware Multiple sectors CRITICAL 5h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 8h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 8h Global phishing Multiple sectors HIGH 8h Global insider Cybersecurity Services CRITICAL 9h Global ransomware Multiple sectors (U.S. companies) CRITICAL 9h Global data_breach Government CRITICAL 2h Global ransomware Financial Services / Cybersecurity CRITICAL 2h Global vulnerability Information Technology / Cybersecurity CRITICAL 4h Global malware Energy and Utilities CRITICAL 5h Global ransomware Multiple sectors CRITICAL 5h Global vulnerability Industrial Control Systems / IoT / Infrastructure CRITICAL 8h Global supply_chain Information Technology and Critical Infrastructure CRITICAL 8h Global phishing Multiple sectors HIGH 8h Global insider Cybersecurity Services CRITICAL 9h Global ransomware Multiple sectors (U.S. companies) CRITICAL 9h

🛡️ CVE Vulnerability Database

CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia

CVE ID Title / Description Severity CVSS Status Published
CVE-2024-11120
GeoVision Devices OS Command Injection Vulnerability — Multiple G…
GeoVision Devices OS Command Injection Vulnerability — Multiple GeoVision devices contain an OS comm…
CRITICAL
9.0
KEV AI May 7, 2025
CVE-2024-6047
GeoVision Devices OS Command Injection Vulnerability (CVE-2024-60…
GeoVision Devices OS Command Injection Vulnerability — Multiple GeoVision devices contain an OS comm…
CRITICAL
9.0
KEV AI May 7, 2025
CVE-2025-27363
FreeType Out-of-Bounds Write in TrueType GX Variable Font Parsing
FreeType Out-of-Bounds Write Vulnerability — FreeType contains an out-of-bounds write vulnerability …
CRITICAL
9.0
KEV AI May 6, 2025
CVE-2025-3248
Langflow Missing Authentication Vulnerability - Arbitrary Code Ex…
Langflow Missing Authentication Vulnerability — Langflow contains a missing authentication vulnerabi…
CRITICAL
9.0
KEV AI May 5, 2025
CVE-2024-58136
Yiiframework Yii Improper Protection of Alternate Path Vulnerabil…
Yiiframework Yii Improper Protection of Alternate Path Vulnerability — Yii Framework contains an imp…
CRITICAL
9.0
KEV AI May 2, 2025
CVE-2025-34028
Commvault Command Center Remote Code Execution via Path Traversal
Commvault Command Center Path Traversal Vulnerability — Commvault Command Center contains a path tra…
CRITICAL
9.0
KEV AI May 2, 2025
CVE-2023-44221
SonicWall SMA100 Appliances OS Command Injection Vulnerability — …
SonicWall SMA100 Appliances OS Command Injection Vulnerability — SonicWall SMA100 appliances contain…
CRITICAL
9.0
KEV AI May 1, 2025
CVE-2024-38475
Apache HTTP Server Improper Escaping of Output Vulnerability — Ap…
Apache HTTP Server Improper Escaping of Output Vulnerability — Apache HTTP Server contains an improp…
CRITICAL
9.0
KEV AI May 1, 2025
CVE-2025-31324
SAP NetWeaver Unrestricted File Upload Vulnerability (CVE-2025-31…
SAP NetWeaver Unrestricted File Upload Vulnerability — SAP NetWeaver Visual Composer Metadata Upload…
CRITICAL
9.0
KEV AI Apr 29, 2025
CVE-2025-1976
Critical Code Injection in Broadcom Brocade Fabric OS Actively Ex…
Broadcom Brocade Fabric OS Code Injection Vulnerability — Broadcom Brocade Fabric OS contains a code…
CRITICAL
9.0
KEV AI Apr 28, 2025
CVE-2025-3928
Commvault Web Server Remote Code Execution via Webshell Execution
Commvault Web Server Unspecified Vulnerability — Commvault Web Server contains an unspecified vulner…
CRITICAL
9.0
KEV AI Apr 28, 2025
CVE-2025-42599
Qualitia Active! Mail Stack-Based Buffer Overflow Remote Code Exe…
Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability — Qualitia Active! Mail contains a s…
CRITICAL
9.0
KEV AI Apr 28, 2025
CVE-2025-24054
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability (CV…
Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability — Microsoft Windows NTLM contains an e…
CRITICAL
9.0
KEV AI Apr 17, 2025
CVE-2025-31200
Apple Multiple Products Memory Corruption Vulnerability in Audio …
Apple Multiple Products Memory Corruption Vulnerability — Apple iOS, iPadOS, macOS, and other Apple …
CRITICAL
9.0
KEV AI Apr 17, 2025
CVE-2025-31201
Apple Multiple Products Arbitrary Read and Write Vulnerability - …
Apple Multiple Products Arbitrary Read and Write Vulnerability — Apple iOS, iPadOS, macOS, and other…
CRITICAL
9.0
KEV AI Apr 17, 2025
CVE-2021-20035
SonicWall SMA100 Appliances OS Command Injection Vulnerability — …
SonicWall SMA100 Appliances OS Command Injection Vulnerability — SonicWall SMA100 appliances contain…
CRITICAL
9.0
KEV AI Apr 16, 2025
CVE-2024-53150
Linux Kernel Out-of-Bounds Read Vulnerability — Linux Kernel cont…
Linux Kernel Out-of-Bounds Read Vulnerability — Linux Kernel contains an out-of-bounds read vulnerab…
CRITICAL
9.0
KEV AI Apr 9, 2025
CVE-2024-53197
Linux Kernel Out-of-Bounds Access Vulnerability — Linux Kernel co…
Linux Kernel Out-of-Bounds Access Vulnerability — Linux Kernel contains an out-of-bounds access vuln…
CRITICAL
9.0
KEV AI Apr 9, 2025
CVE-2025-29824
Microsoft Windows CLFS Driver Use-After-Free Privilege Escalation…
Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability — Microsoft Wind…
CRITICAL
9.0
KEV AI Apr 8, 2025
CVE-2025-30406
Gladinet CentreStack Hard-coded Cryptographic Key Vulnerability -…
Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability — Gladinet Centre…
CRITICAL
9.0
KEV AI Apr 8, 2025
CVE-2025-31161
CrushFTP Authentication Bypass via HTTP Authorization Header
CrushFTP Authentication Bypass Vulnerability — CrushFTP contains an authentication bypass vulnerabil…
CRITICAL
9.0
KEV AI Apr 7, 2025
CVE-2025-22457
Ivanti Connect Secure Stack-Based Buffer Overflow Remote Code Exe…
Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability — I…
CRITICAL
9.0
KEV AI Apr 4, 2025
CVE-2025-24813
Apache Tomcat Path Equivalence Vulnerability - Remote Code Execut…
Apache Tomcat Path Equivalence Vulnerability — Apache Tomcat contains a path equivalence vulnerabili…
CRITICAL
9.0
KEV AI Apr 1, 2025
CVE-2024-20439
Cisco Smart Licensing Utility Static Credential Vulnerability — C…
Cisco Smart Licensing Utility Static Credential Vulnerability — Cisco Smart Licensing Utility contai…
CRITICAL
9.0
KEV AI Mar 31, 2025
CVE-2025-2783
Google Chromium Mojo Sandbox Escape Vulnerability (CVE-2025-2783)
Google Chromium Mojo Sandbox Escape Vulnerability — Google Chromium Mojo on Windows contains a sandb…
CRITICAL
9.0
KEV AI Mar 27, 2025
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
💡 Search Tips
CVE-2024-12345 Search by exact ID
apache Search by product name
remote code execution Search by vulnerability type
log4j Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron
📣 Found this valuable?
Share it with your cybersecurity network
in LinkedIn 𝕏 X / Twitter 💬 WhatsApp ✈ Telegram
🍪 Privacy Preferences
CISO Consulting — Compliant with Saudi Personal Data Protection Law (PDPL)
We use cookies and similar technologies to provide the best experience on our platform. You can choose which types you accept.
🔒
Essential Always On
Required for the website to function properly. Cannot be disabled.
📋 Sessions, CSRF tokens, authentication, language preferences
📊
Analytics
Help us understand how visitors use the site and improve performance.
📋 Page views, session duration, traffic sources, performance metrics
⚙️
Functional
Enable enhanced features like content personalization and preferences.
📋 Dark/light theme, font size, custom dashboards, saved filters
📣
Marketing
Used to deliver content and ads relevant to your interests.
📋 Campaign tracking, retargeting, social media analytics
Privacy Policy →
CISO AI Assistant
Ask anything · Documents · Support
🔐

Introduce Yourself

Enter your details to access the full assistant

Your info is private and never shared
💬
CyberAssist
Online · responds in seconds
5 / 5
🔐 Verify Your Identity

Enter your email to receive a verification code before submitting a support request.

Enter to send · / for commands 0 / 2000
CISO AI · Powered by Anthropic Claude
✦ Quick Survey Help Us Improve CISO Consulting Your feedback shapes the future of our platform — takes less than 2 minutes.
⚠ Please answer this question to continue

How would you rate your overall experience with our platform?

Rate from 1 (poor) to 5 (excellent)

🎉
Thank you!
Your response has been recorded.