Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2002-2149

Publication date:

31/12/2002

Buffer overflow in Lucent Access Point 300, 600, and 1500 Service Routers allows remote attackers to cause a denial of service (reboot) via a long HTTP request to the administrative interface.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2150

Publication date:

31/12/2002

Firewalls from multiple vendors empty state tables more slowly than they are filled, which allows remote attackers to flood state tables with packet flooding attacks such as (1) TCP SYN flood, (2) UDP flood, or (3) Crikey CRC Flood, which causes the firewall to refuse any new connections.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2152

Publication date:

31/12/2002

The Czech edition of Software602&#39;s Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2155

Publication date:

31/12/2002

Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2156

Publication date:

31/12/2002

Buffer overflow in Trillian 0.73 allows remote IRC servers to execute arbitrary code via a long PING response.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2158

Publication date:

31/12/2002

zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-2161

Publication date:

31/12/2002

Kerio Personal Firewall (KPF) 2.1.4 and earlier allows remote attackers to cause a denial of service (hang and CPU consumption) via a SYN packet flood.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1890

Publication date:

31/12/2002

rhmask 1.0-9 in Red Hat Linux 7.1 allows local users to overwrite arbitrary files via a symlink attack on the mask file.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1891

Publication date:

31/12/2002

Buffer overflow in IRCIT 0.3.1 IRC client allows remote attackers to execute arbitrary code via a long invite request.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1892

Publication date:

31/12/2002

NETGEAR FVS318 running firmware 1.1 stores the username and password in a readable format when a backup of the configuration file is made, which allows local users to obtain sensitive information.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1893

Publication date:

31/12/2002

Cross-site scripting (XSS) vulnerability in ArGoSoft Mail Server Pro 1.8.1.9 allows remote attackers to inject arbitrary web script or HTML via the e-mail message.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2002-1894

Publication date:

31/12/2002

Cross-site scripting (XSS) vulnerability in viewtopic.php in phpBB 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the highlight parameter.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

Subscribe to Vulnerabilities