Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2002-2384

Publication date:

31/12/2002

hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2385

Publication date:

31/12/2002

Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2386

Publication date:

31/12/2002

Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2387

Publication date:

31/12/2002

Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2388

Publication date:

31/12/2002

Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2389

Publication date:

31/12/2002

TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2390

Publication date:

31/12/2002

Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2391

Publication date:

31/12/2002

SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2392

Publication date:

31/12/2002

Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2394

Publication date:

31/12/2002

InterScan VirusWall 3.6 for Linux and 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 chunked transfer encoding.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2395

Publication date:

31/12/2002

InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2396

Publication date:

31/12/2002

Buffer overflow in Advanced TFTP (atftp) 0.5 and 0.6, if installed setuid or setgid, may allow local users to execute arbitrary code via a long argument to the -g option.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

Subscribe to Vulnerabilities