Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2022-44806

Publication date:
22/11/2022
D-Link DIR-882 1.10B02 and 1.20B06 is vulnerable to Buffer Overflow.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44804

Publication date:
22/11/2022
D-Link DIR-882 1.10B02 and1.20B06 is vulnerable to Buffer Overflow via the websRedirect function.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44808

Publication date:
22/11/2022
A command injection vulnerability has been found on D-Link DIR-823G devices with firmware version 1.02B03 that allows an attacker to execute arbitrary operating system commands through well-designed /HNAP1 requests. Before the HNAP API function can process the request, the system function executes an untrusted command that triggers the vulnerability.
Severity CVSS v4.0: Pending analysis
Last modification:
25/04/2025

CVE-2022-44184

Publication date:
22/11/2022
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameter wan_dns1_sec.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44201

Publication date:
22/11/2022
D-Link DIR823G 1.02B05 is vulnerable to Commad Injection.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44202

Publication date:
22/11/2022
D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44801

Publication date:
22/11/2022
D-Link DIR-878 1.02B05 is vulnerable to Incorrect Access Control.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44198

Publication date:
22/11/2022
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_push1.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44199

Publication date:
22/11/2022
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44200

Publication date:
22/11/2022
Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44197

Publication date:
22/11/2022
Netgear R7000P V1.3.0.8 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025

CVE-2022-44193

Publication date:
22/11/2022
Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow in /usr/sbin/httpd via parameters: starthour, startminute , endhour, and endminute.
Severity CVSS v4.0: Pending analysis
Last modification:
29/04/2025