Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2002-1943

Publication date:

31/12/2002

SafeTP 1.46, when network address translation (NAT) is being used, leaks the internal IP address of the FTP server in a response to a passive mode (PASV) file transfer request.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1944

Publication date:

31/12/2002

Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service (crash) by performing a SYN scan using a tool such as nmap.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1945

Publication date:

31/12/2002

Buffer overflow in SmartMail Server 1.0 Beta 10 allows remote attackers to cause a denial of service (crash) via a long request to (1) TCP port 25 (SMTP) or (2) TCP port 110 (POP3).

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1946

Publication date:

31/12/2002

Videsh Sanchar Nigam Limited (VSNL) Integrated Dialer Software 1.2.000, when the "Save Password" option is used, stores the password with a weak encryption scheme (one-to-one mapping) in a registry key, which allows local users to obtain and decrypt the password.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1947

Publication date:

31/12/2002

Webmin 0.21 through 1.0 uses the same built-in SSL key for all installations, which allows remote attackers to eavesdrop or highjack the SSL session.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1948

Publication date:

31/12/2002

Multiple buffer overflows in Gringotts 0.5.9 allows local users to execute arbitrary commands via unknown attack vectors.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2358

Publication date:

31/12/2002

Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2359

Publication date:

31/12/2002

Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2360

Publication date:

31/12/2002

The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2361

Publication date:

31/12/2002

The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2362

Publication date:

31/12/2002

Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025