Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2003-0488

Publication date:

07/08/2003

Multiple cross-site scripting (XSS) vulnerabilities in Kerio MailServer 5.6.3 allow remote attackers to insert arbitrary web script via (1) the add_name parameter in the add_acl module, or (2) the alias parameter in the do_map module.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0492

Publication date:

07/08/2003

Cross-site scripting (XSS) vulnerability in search.asp for Snitz Forums 3.4.03 and earlier allows remote attackers to execute arbitrary web script via the Search parameter.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0494

Publication date:

07/08/2003

password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0495

Publication date:

07/08/2003

Cross-site scripting (XSS) vulnerability in LedNews 0.7 allows remote attackers to insert arbitrary web script via a news item.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0509

Publication date:

07/08/2003

SQL injection vulnerability in Cyberstrong eShop 4.2 and earlier allows remote attackers to steal authentication information and gain privileges via the ProductCode parameter in (1) 10expand.asp, (2) 10browse.asp, and (3) 20review.asp.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0499

Publication date:

07/08/2003

Mantis 0.17.5 and earlier stores its database password in cleartext in a world-readable configuration file, which allows local users to perform unauthorized database operations.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0450

Publication date:

07/08/2003

Cistron RADIUS daemon (radiusd-cistron) 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0451

Publication date:

07/08/2003

Multiple buffer overflows in xbl before 1.0k allow local users to gain privileges via certain long command line arguments.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0452

Publication date:

07/08/2003

Buffer overflows in osh before 1.7-11 allow local users to execute arbitrary code and bypass shell restrictions via (1) long environment variables or (2) long "file redirections."

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0454

Publication date:

07/08/2003

Multiple buffer overflows in xgalaga 2.0.34 and earlier allow local users to gain privileges via a long HOME environment variable.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0489

Publication date:

07/08/2003

tcptraceroute 1.4 and earlier does not fully drop privileges after obtaining a file descriptor for capturing packets, which may allow local users to gain access to the descriptor via a separate vulnerability in tcptraceroute.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0500

Publication date:

07/08/2003

SQL injection vulnerability in the PostgreSQL authentication module (mod_sql_postgres) for ProFTPD before 1.2.9rc1 allows remote attackers to execute arbitrary SQL and gain privileges by bypassing authentication or stealing passwords via the USER name.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

Subscribe to Vulnerabilities