Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2013-5638
Publication date:
07/01/2020
Transcend WiFiSD 1.8 has persistent XSS
Severity CVSS v4.0: Pending analysis
Last modification:
08/01/2020

CVE-2013-5637
Publication date:
07/01/2020
PQI AirCard has persistent XSS
Severity CVSS v4.0: Pending analysis
Last modification:
08/01/2020

CVE-2013-5656
Publication date:
07/01/2020
FuzeZip 1.0.0.131625 has a Local Buffer Overflow vulnerability
Severity CVSS v4.0: Pending analysis
Last modification:
08/01/2020

CVE-2019-14834
Publication date:
07/01/2020
A vulnerability was found in dnsmasq before version 2.81, where the memory leak allows remote attackers to cause a denial of service (memory consumption) via vectors involving DHCP response creation.
Severity CVSS v4.0: Pending analysis
Last modification:
17/06/2026

CVE-2020-5393
Publication date:
07/01/2020
In Appspace On-Prem through 7.1.3, an adversary can steal a session token via XSS.
Severity CVSS v4.0: Pending analysis
Last modification:
08/01/2020

CVE-2013-5571
Publication date:
07/01/2020
HMailServer 5.3.x and prior: Memory Corruption which could cause DOS
Severity CVSS v4.0: Pending analysis
Last modification:
08/01/2020

CVE-2013-5122
Publication date:
07/01/2020
Cisco Linksys Routers EA2700, EA3500, E4200, EA4500: A bug can cause an unsafe TCP port to open which leads to unauthenticated access
Severity CVSS v4.0: Pending analysis
Last modification:
09/01/2020

CVE-2020-5843
Publication date:
07/01/2020
Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen.
Severity CVSS v4.0: Pending analysis
Last modification:
08/01/2020

CVE-2019-6854
Publication date:
06/01/2020
A CWE-287: Improper Authentication vulnerability exists in a folder within EcoStruxure Geo SCADA Expert (ClearSCADA) -with initial releases before 1 January 2019- which could cause a low privilege user to delete or modify database, setting or certificate files. Those users must have access to the file system of that operating system to exploit this vulnerability. Affected versions in current support includes ClearSCADA 2017 R3, ClearSCADA 2017 R2, and ClearSCADA 2017.
Severity CVSS v4.0: Pending analysis
Last modification:
17/06/2026

CVE-2019-6855
Publication date:
06/01/2020
Incorrect Authorization vulnerability exists in EcoStruxure Control Expert (all versions prior to 14.1 Hot Fix), Unity Pro (all versions), Modicon M340 (all versions prior to V3.20) , and Modicon M580 (all versions prior to V3.10), which could cause a bypass of the authentication process between EcoStruxure Control Expert and the M340 and M580 controllers.
Severity CVSS v4.0: Pending analysis
Last modification:
17/06/2026

CVE-2019-6856
Publication date:
06/01/2020
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service when writing specific physical memory blocks using Modbus TCP.
Severity CVSS v4.0: Pending analysis
Last modification:
17/06/2026

CVE-2019-6857
Publication date:
06/01/2020
A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Modicon M580, Modicon M340, Modicon Quantum, Modicon Premium (see security notification for specific versions) which could cause a Denial of Service of the controller when reading specific memory blocks using Modbus TCP.
Severity CVSS v4.0: Pending analysis
Last modification:
17/06/2026
Subscribe to Vulnerabilities