Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-1999-0935

Publication date:
15/12/1999
classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI form.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-1010

Publication date:
14/12/1999
An SSH 1.2.27 server allows a client to use the "none" cipher, even if it is not allowed by the server policy.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0068

Publication date:
14/12/1999
daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modify its configuration, delete files, or read mail.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-2000-0361

Publication date:
14/12/1999
The PPP wvdial.lxdialog script in wvdial 1.4 and earlier creates a .config file with world readable permissions, which allows a local attacker in the dialout group to access login and password information.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-1007

Publication date:
13/12/1999
Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo file.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-0993

Publication date:
13/12/1999
Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cache is refreshed.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-1003

Publication date:
13/12/1999
War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-0289

Publication date:
12/12/1999
The Apache web server for Win32 may provide access to restricted files when a . (dot) is appended to a requested URL.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-1009

Publication date:
12/12/1999
The Disney Go Express Search allows remote attackers to access and modify search information for users by connecting to an HTTP server on the user's system.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-0975

Publication date:
10/12/1999
The Windows help system can allow a local user to execute commands as another user by editing a table of contents metafile with a .CNT extension and modifying the topic action to include the commands to be executed when the .hlp file is accessed.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-0977

Publication date:
10/12/1999
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025

CVE-1999-0972

Publication date:
09/12/1999
Buffer overflow in Xshipwars xsw program.
Severity CVSS v4.0: Pending analysis
Last modification:
03/04/2025