Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2000-0220

Publication date:
24/02/2000
ZoneAlarm sends sensitive system and network information in cleartext to the Zone Labs server if a user requests more information about an event.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0214

Publication date:
24/02/2000
FTP Explorer uses weak encryption for storing the username, password, and profile of FTP sites.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0211

Publication date:
23/02/2000
The Windows Media server allows remote attackers to cause a denial of service via a series of client handshake packets that are sent in an improper sequence, aka the "Misordered Windows Media Services Handshake" vulnerability.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0182

Publication date:
23/02/2000
iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0213

Publication date:
23/02/2000
The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via shell metacharacters.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0219

Publication date:
23/02/2000
Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0163

Publication date:
21/02/2000
asmon and ascpu in FreeBSD allow local users to gain root privileges via a configuration file.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0210

Publication date:
21/02/2000
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0160

Publication date:
21/02/2000
The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install software components without prompting the user by stating that the software's manufacturer is Microsoft.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0166

Publication date:
21/02/2000
Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login name.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0164

Publication date:
20/02/2000
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0161

Publication date:
18/02/2000
Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows remote attackers to execute SQL commands.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025