Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2000-0224
Publication date:
15/02/2000
ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0197
Publication date:
14/02/2000
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0150
Publication date:
12/02/2000
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0141
Publication date:
11/02/2000
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0142
Publication date:
11/02/2000
The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0143
Publication date:
11/02/2000
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0140
Publication date:
10/02/2000
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0149
Publication date:
08/02/2000
Zeus web server allows remote attackers to view the source code for CGI programs via a null character (%00) at the end of a URL.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0147
Publication date:
08/02/2000
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0215
Publication date:
08/02/2000
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0148
Publication date:
08/02/2000
MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0144
Publication date:
07/02/2000
Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the password protection via a .. (dot dot) attack.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025
Subscribe to Vulnerabilities