Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2001-1490
Publication date:
31/12/2001
Mozilla 0.9.6 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1491
Publication date:
31/12/2001
Opera 5.11 allows remote attackers to cause a denial of service (CPU consumption and memory leak) via a web page with a large number of images.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1494
Publication date:
31/12/2001
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1495
Publication date:
31/12/2001
network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target parameter.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1496
Publication date:
31/12/2001
Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of service and possibly execute arbitrary code.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1497
Publication date:
31/12/2001
Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters used in a password by pressing certain control keys that jump between non-alphanumeric characters, which makes it easier to conduct a brute-force password guessing attack.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1498
Publication date:
31/12/2001
Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1499
Publication date:
31/12/2001
Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on the authentication method being used, which makes it easier for remote attackers to conduct brute force attacks.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1500
Publication date:
31/12/2001
ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which allows remote attackers to bypass ACLs or cause an incorrect client hostname to be logged.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1501
Publication date:
31/12/2001
The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory consumption) via commands with large numbers of wildcard and other special characters, as demonstrated using an ls command with multiple (1) "*/..", (2) "*/.*", or (3) ".*./*?/" sequences in the argument.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1502
Publication date:
31/12/2001
webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NEXTPAGE parameter.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2001-1503
Publication date:
31/12/2001
The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026
Subscribe to Vulnerabilities