Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2002-2269

Publication date:

31/12/2002

Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2271

Publication date:

31/12/2002

Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attackers to cause a denial of service (crash) via a long string.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2272

Publication date:

31/12/2002

Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2273

Publication date:

31/12/2002

Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2274

Publication date:

31/12/2002

akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2275

Publication date:

31/12/2002

Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2276

Publication date:

31/12/2002

Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2277

Publication date:

31/12/2002

SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2278

Publication date:

31/12/2002

Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the (1) $App_Theme, (2) $Rub_Search, (3) $Rub_News, (4) $Rub_File, (5) $Rub_Liens, or (6) $Rub_Faq variables.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2279

Publication date:

31/12/2002

Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2281

Publication date:

31/12/2002

Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2282

Publication date:

31/12/2002

McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user&#39;s home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

Subscribe to Vulnerabilities