Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2000-0154
Publication date:
16/02/2000
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0158
Publication date:
16/02/2000
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0156
Publication date:
16/02/2000
Internet Explorer 4.x and 5.x allows remote web servers to access files on the client that are outside of its security domain, aka the "Image Source Redirect" vulnerability.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0167
Publication date:
15/02/2000
IIS Inetinfo.exe allows local users to cause a denial of service by creating a mail file with a long name and a .txt.eml extension in the pickup directory.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0222
Publication date:
15/02/2000
The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allows remote attackers to connect to the ADMIN$ share without a password until the reboot occurs.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0224
Publication date:
15/02/2000
ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0197
Publication date:
14/02/2000
The Windows NT scheduler uses the drive mapping of the interactive user who is currently logged onto the system, which allows the local user to gain privileges by providing a Trojan horse batch file in place of the original batch file.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0150
Publication date:
12/02/2000
Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send malicious packets that Firewall-1 misinterprets as a valid 227 response to a client's PASV attempt.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0141
Publication date:
11/02/2000
Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic hidden field.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0142
Publication date:
11/02/2000
The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0143
Publication date:
11/02/2000
The SSH protocol server sshd allows local users without shell access to redirect a TCP connection through a service that uses the standard system password database for authentication, such as POP or FTP.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0140
Publication date:
10/02/2000
Internet Anywhere POP3 Mail Server allows remote attackers to cause a denial of service via a large number of connections.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025
Subscribe to Vulnerabilities