Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2017-16165

Publication date:

07/06/2018

calmquist.static-server is a static file server. calmquist.static-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16166

Publication date:

07/06/2018

byucslabsix is an http server. byucslabsix is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16167

Publication date:

07/06/2018

yyooopack is a simple file server. yyooopack is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16168

Publication date:

07/06/2018

wffserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16169

Publication date:

07/06/2018

looppake is a simple http server. looppake is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16170

Publication date:

07/06/2018

liuyaserver is a static file server. liuyaserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16171

Publication date:

07/06/2018

hcbserver is a static file server. hcbserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16172

Publication date:

07/06/2018

section2.madisonjbrooks12 is a simple web server. section2.madisonjbrooks12 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16173

Publication date:

07/06/2018

utahcityfinder constructs lists of Utah cities with a certain prefix. utahcityfinder is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16174

Publication date:

07/06/2018

whispercast is a file server. whispercast is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16175

Publication date:

07/06/2018

ewgaddis.lab6 is a file server. ewgaddis.lab6 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

CVE-2017-16176

Publication date:

07/06/2018

jansenstuffpleasework is a file server. jansenstuffpleasework is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.

Severity CVSS v4.0: Pending analysis

Last modification:

09/10/2019

Subscribe to Vulnerabilities