🛡️ CVE Vulnerability Database
CVE vulnerabilities with bilingual AI analysis tailored for Saudi Arabia
| CVE ID | Title / Description | Severity | CVSS | Status | Published |
|---|---|---|---|---|---|
| CVE-2020-37076 |
Victor CMS version 1.0 contains a SQL injection vulnerability in …
Victor CMS version 1.0 contains a SQL injection vulnerability in the 'post' parameter on post.php th…
|
HIGH |
8.2
|
⚡ ✅ | Feb 3, 2026 |
| CVE-2020-37078 |
i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerabi…
i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allo…
|
HIGH |
8.8
|
✅ AI | Feb 3, 2026 |
| CVE-2020-37081 |
Fishing Reservation System 7.5 contains multiple remote SQL injec…
Fishing Reservation System 7.5 contains multiple remote SQL injection vulnerabilities in admin.php, …
|
HIGH |
7.1
|
✅ | Feb 3, 2026 |
| CVE-2020-37083 |
PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection…
PHP AddressBook 9.0.0.1 contains a time-based blind SQL injection vulnerability that allows remote a…
|
HIGH |
8.2
|
✅ | Feb 3, 2026 |
| CVE-2020-37084 |
School ERP Pro 1.0 contains a remote code execution vulnerability…
School ERP Pro 1.0 contains a remote code execution vulnerability that allows authenticated admin us…
|
HIGH |
7.2
|
⚡ ✅ | Feb 3, 2026 |
| CVE-2020-37085 |
VirtualTablet Server 3.0.2 contains a denial of service vulnerabi…
VirtualTablet Server 3.0.2 contains a denial of service vulnerability that allows attackers to crash…
|
HIGH |
7.5
|
✅ | Feb 3, 2026 |
| CVE-2020-37088 |
School ERP Pro 1.0 contains a file disclosure vulnerability that …
School ERP Pro 1.0 contains a file disclosure vulnerability that allows unauthenticated attackers to…
|
HIGH |
7.5
|
⚡ ✅ | Feb 3, 2026 |
| CVE-2020-37092 |
Netis E1+ version 1.2.32533 contains a hardcoded root account vul…
Netis E1+ version 1.2.32533 contains a hardcoded root account vulnerability that allows unauthentica…
|
HIGH |
7.5
|
✅ | Feb 3, 2026 |
| CVE-2020-37093 |
Netis E1+ 1.2.32533 contains an information disclosure vulnerabil…
Netis E1+ 1.2.32533 contains an information disclosure vulnerability that allows unauthenticated att…
|
HIGH |
7.5
|
✅ | Feb 3, 2026 |
| CVE-2020-37097 |
Edimax EW-7438RPn 1.13 contains an information disclosure vulnera…
Edimax EW-7438RPn 1.13 contains an information disclosure vulnerability that exposes WiFi network co…
|
HIGH |
7.5
|
⚡ ✅ | Feb 3, 2026 |
| CVE-2020-37098 |
Disk Sorter Enterprise 12.4.16 contains an unquoted service path …
Disk Sorter Enterprise 12.4.16 contains an unquoted service path vulnerability that allows local att…
|
HIGH |
7.8
|
✅ | Feb 3, 2026 |
| CVE-2020-37099 |
Disk Savvy Enterprise 12.3.18 contains an unquoted service path v…
Disk Savvy Enterprise 12.3.18 contains an unquoted service path vulnerability in its service configu…
|
HIGH |
7.8
|
✅ | Feb 3, 2026 |
| CVE-2020-37100 |
Sync Breeze Enterprise 12.4.18 contains an unquoted service path …
Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local att…
|
HIGH |
7.8
|
⚡ ✅ | Feb 3, 2026 |
| CVE-2020-37101 |
VPN Unlimited 6.1 contains an unquoted service path vulnerability…
VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inj…
|
HIGH |
7.8
|
✅ | Feb 3, 2026 |
| CVE-2020-37102 |
Adaware Web Companion 4.9.2159 contains an unquoted service path …
Adaware Web Companion 4.9.2159 contains an unquoted service path vulnerability in the WCAssistantSer…
|
HIGH |
7.8
|
✅ | Feb 3, 2026 |
| CVE-2020-37105 |
PMB 5.6 contains a SQL injection vulnerability in the administrat…
PMB 5.6 contains a SQL injection vulnerability in the administration download script that allows aut…
|
HIGH |
7.1
|
✅ | Feb 3, 2026 |
| CVE-2020-37108 |
PhpIX 2012 Professional contains a SQL injection vulnerability in…
PhpIX 2012 Professional contains a SQL injection vulnerability in the 'id' parameter of product_deta…
|
HIGH |
7.1
|
✅ | Feb 3, 2026 |
| CVE-2020-37113 |
GUnet OpenEclass 1.7.3 allows authenticated users to bypass file …
GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploadi…
|
HIGH |
8.8
|
⚡ ✅ AI | Feb 3, 2026 |
| CVE-2020-37116 |
GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, w…
GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attacker…
|
HIGH |
8.8
|
⚡ ✅ AI | Feb 3, 2026 |
| CVE-2022-50975 |
An unauthenticated remote attacker is able to use an existing ses…
An unauthenticated remote attacker is able to use an existing session id of a logged in user and gai…
|
HIGH |
8.8
|
✅ AI | Feb 2, 2026 |
| CVE-2022-50976 |
A local attacker could cause a full device reset by resetting the…
A local attacker could cause a full device reset by resetting the device passwords using an invalid …
|
HIGH |
7.7
|
✅ | Feb 2, 2026 |
| CVE-2022-50977 |
An unauthenticated remote attacker could potentially disrupt oper…
An unauthenticated remote attacker could potentially disrupt operations by switching between multipl…
|
HIGH |
7.5
|
✅ | Feb 2, 2026 |
| CVE-2022-50978 |
An unauthenticated remote attacker could potentially disrupt oper…
An unauthenticated remote attacker could potentially disrupt operations by switching between multipl…
|
HIGH |
7.5
|
✅ | Feb 2, 2026 |
| CVE-2026-1740 |
A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impa…
A vulnerability was found in EFM ipTIME A8004T 14.18.2. This impacts the function httpcon_check_sess…
|
HIGH |
7.3
|
✅ | Feb 2, 2026 |
| CVE-2026-20401 |
In Modem, there is a possible system crash due to an uncaught exc…
In Modem, there is a possible system crash due to an uncaught exception. This could lead to remote d…
|
HIGH |
7.5
|
✅ | Feb 2, 2026 |
🤖 AI Analysis Active
AI analysis includes: Arabic description, Saudi impact assessment, remediation steps, compliance mapping (NCA ECC, SAMA CSF, ISO 27001) and MITRE ATT&CK techniques.
🔴 Recent Critical CVEs
CVE-2026-20133
Apr 20, 2026
CVE-2026-20128
Apr 20, 2026
CVE-2026-20122
Apr 20, 2026
CVE-2025-48700
Apr 20, 2026
CVE-2025-32975
Apr 20, 2026
💡 Search Tips
CVE-2024-12345
Search by exact ID
apache
Search by product name
remote code execution
Search by vulnerability type
log4j
Search by common name
📡 Data Sources
NVD (NIST) · CIRCL
CISA KEV · ThreatFox
Feodo Tracker · AlienVault OTX
Auto-updated daily via cron