Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2021-25429

Publication date:

08/07/2021

Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application.

Severity CVSS v4.0: Pending analysis

Last modification:

14/07/2021

CVE-2021-25427

Publication date:

08/07/2021

SQL injection vulnerability in Bluetooth prior to SMR July-2021 Release 1 allows unauthorized access to paired device information

Severity CVSS v4.0: Pending analysis

Last modification:

14/07/2021

CVE-2021-25428

Publication date:

08/07/2021

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances.

Severity CVSS v4.0: Pending analysis

Last modification:

14/07/2021

CVE-2021-25432

Publication date:

08/07/2021

Information exposure vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to access chat data.

Severity CVSS v4.0: Pending analysis

Last modification:

12/07/2021

CVE-2021-25433

Publication date:

08/07/2021

Improper authorization vulnerability in Tizen factory reset policy prior to Firmware update JUL-2021 Release allows untrusted applications to perform factory reset using dbus signal.

Severity CVSS v4.0: Pending analysis

Last modification:

25/07/2022

CVE-2021-25438

Publication date:

08/07/2021

Improper access control vulnerability in Samsung Members prior to versions 2.4.85.11 in Android O(8.1) and below, and 3.9.10.11 in Android P(9.0) and above allows untrusted applications to cause local file inclusion in webview.

Severity CVSS v4.0: Pending analysis

Last modification:

25/07/2022

CVE-2021-25439

Publication date:

08/07/2021

Severity CVSS v4.0: Pending analysis

Last modification:

25/07/2022

CVE-2021-25426

Publication date:

08/07/2021

Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applications to access Message files.

Severity CVSS v4.0: Pending analysis

Last modification:

23/09/2022

CVE-2021-34110

Publication date:

08/07/2021

WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious file that will be executed with "LocalSystem" privileges.

Severity CVSS v4.0: Pending analysis

Last modification:

14/02/2024

CVE-2021-21806

Publication date:

08/07/2021

An exploitable use-after-free vulnerability exists in WebKitGTK browser version 2.30.3 x64. A specially crafted HTML web page can cause a use-after-free condition, resulting in remote code execution. The victim needs to visit a malicious web site to trigger the vulnerability.

Severity CVSS v4.0: Pending analysis

Last modification:

06/10/2022

CVE-2020-20217

Publication date:

08/07/2021

Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/route process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.

Severity CVSS v4.0: Pending analysis

Last modification:

07/11/2022

CVE-2021-21779

Publication date:

08/07/2021

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events in WebKitGTK 2.30.4. A specially crafted web page can lead to a potential information leak and further memory corruption. A victim must be tricked into visiting a malicious web page to trigger this vulnerability.

Severity CVSS v4.0: Pending analysis

Last modification:

07/11/2023

Subscribe to Vulnerabilities