🛡️ CVE Vulnerability Database
CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia
| CVE ID | Title / Description | Severity | CVSS | Status | Published |
|---|---|---|---|---|---|
| CVE-2016-3088 |
Apache ActiveMQ Improper Input Validation Vulnerability — The Fil…
Apache ActiveMQ Improper Input Validation Vulnerability — The Fileserver web application in Apache A…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Feb 10, 2022 |
| CVE-2012-0391 |
Apache Struts 2 ExceptionDelegator Remote Code Execution Vulnerab…
Apache Struts 2 Improper Input Validation Vulnerability — The ExceptionDelegator component in Apache…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 21, 2022 |
| CVE-2006-1547 |
Apache Struts 1 ActionForm Denial-of-Service Vulnerability (CVE-2…
Apache Struts 1 ActionForm Denial-of-Service Vulnerability — ActionForm in Apache Struts versions be…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 21, 2022 |
| CVE-2020-13927 |
Apache Airflow's Experimental API Authentication Bypass — The pre…
Apache Airflow's Experimental API Authentication Bypass — The previous default setting for Airflow's…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 18, 2022 |
| CVE-2020-11978 |
Apache Airflow Command Injection — A remote code/command injectio…
Apache Airflow Command Injection — A remote code/command injection vulnerability was discovered in o…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Jan 18, 2022 |
| CVE-2021-44228 |
Apache Log4j2 Remote Code Execution Vulnerability — Apache Log4j2…
Apache Log4j2 Remote Code Execution Vulnerability — Apache Log4j2 contains a vulnerability where JND…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Dec 10, 2021 |
| CVE-2019-0193 |
Apache Solr DataImportHandler Code Injection Vulnerability — The …
Apache Solr DataImportHandler Code Injection Vulnerability — The optional Apache Solr module DataImp…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Dec 10, 2021 |
| CVE-2021-40438 |
Apache HTTP Server-Side Request Forgery (SSRF) — A crafted reques…
Apache HTTP Server-Side Request Forgery (SSRF) — A crafted request uri-path can cause mod_proxy to f…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Dec 1, 2021 |
| CVE-2021-42013 |
Apache HTTP Server Path Traversal Vulnerability — Apache HTTP Ser…
Apache HTTP Server Path Traversal Vulnerability — Apache HTTP Server contains a path traversal vulne…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2021-41773 |
Apache HTTP Server Path Traversal Vulnerability — Apache HTTP Ser…
Apache HTTP Server Path Traversal Vulnerability — Apache HTTP Server contains a path traversal vulne…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2020-17530 |
Apache Struts Remote Code Execution Vulnerability — Forced Object…
Apache Struts Remote Code Execution Vulnerability — Forced Object-Graph Navigation Language (OGNL) e…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2019-17558 |
Apache Solr VelocityResponseWriter Plug-In Remote Code Execution …
Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability — The Apache Solr Vel…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2019-0211 |
Apache HTTP Server Privilege Escalation Vulnerability — Apache HT…
Apache HTTP Server Privilege Escalation Vulnerability — Apache HTTP Server, with MPM event, worker o…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2018-11776 |
Apache Struts Remote Code Execution Vulnerability — Apache Struts…
Apache Struts Remote Code Execution Vulnerability — Apache Struts contains a vulnerability that allo…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2017-9805 |
Apache Struts Deserialization of Untrusted Data Vulnerability — A…
Apache Struts Deserialization of Untrusted Data Vulnerability — Apache Struts REST Plugin uses an XS…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2017-5638 |
Apache Struts Remote Code Execution Vulnerability — Apache Struts…
Apache Struts Remote Code Execution Vulnerability — Apache Struts Jakarta Multipart parser allows fo…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2016-4437 |
Apache Shiro Code Execution Vulnerability — Apache Shiro contains…
Apache Shiro Code Execution Vulnerability — Apache Shiro contains a vulnerability which may allow re…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
| CVE-2015-4852 |
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerab…
Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability — Oracle WebLogic Server cont…
|
CRITICAL |
9.0
|
⚡ ✅ KEV AI | Nov 3, 2021 |
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
🔴 Recent Critical CVEs
CVE-2026-20133
Apr 20, 2026
CVE-2026-20128
Apr 20, 2026
CVE-2026-20122
Apr 20, 2026
CVE-2025-48700
Apr 20, 2026
CVE-2025-32975
Apr 20, 2026
💡 Search Tips
CVE-2024-12345
Search by exact ID
apache
Search by product name
remote code execution
Search by vulnerability type
log4j
Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron