Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2018-25295

Publication date:

26/04/2026

ObserverIP Scan Tool 1.4.0.1 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the IP input field. Attackers can paste a 2000-byte buffer of repeated characters into the IP field and trigger a search operation to cause an application crash.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25289

Publication date:

26/04/2026

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu&#39;s Enter Registration Code dialog to cause a denial of service.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25290

Publication date:

26/04/2026

Easyboot 6.6.0 contains a buffer overflow vulnerability in the Replace Text function that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by accessing File > Tools > Replace Text and pasting a 7000-byte payload into the text fields to cause a denial of service.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25291

Publication date:

26/04/2026

Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 6000-byte payload into the Plugin Directory field through the Options > Settings > Directories interface to trigger an application crash when settings are reopened.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25283

Publication date:

26/04/2026

iSmartViewPro 1.5 contains a structured exception handling (SEH) buffer overflow vulnerability in the &#39;Save Path for Snapshot and Record file&#39; field that allows local attackers to execute arbitrary code. Attackers can input a crafted payload exceeding 260 bytes through the System Setup interface to overwrite SEH records and execute shellcode with application privileges.

Severity CVSS v4.0: HIGH

Last modification:

27/04/2026

CVE-2018-25284

Publication date:

26/04/2026

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File > Options > Save dialog&#39;s folder/file name input field.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25285

Publication date:

26/04/2026

Fathom 2.4 contains a buffer overflow vulnerability in the Authorization Code field that allows local attackers to crash the application by submitting an oversized input string. Attackers can paste a 6000-byte payload into the Authorization Code field and click Activate to trigger a denial of service condition.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25286

Publication date:

26/04/2026

Easy PhotoResQ 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Folder/filename field. Attackers can input a 6000-byte payload through the File Options dialog to trigger a denial of service condition.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25287

Publication date:

26/04/2026

Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25288

Publication date:

26/04/2026

StyleWriter 1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 6000-byte payload into the Pattern to Find or Advice Message fields in the Add Pattern dialog to trigger a denial of service condition.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25276

Publication date:

26/04/2026

RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields and click Register to trigger an application crash.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

CVE-2018-25277

Publication date:

26/04/2026

PixGPS 1.1.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized string to the folder path input field. Attackers can craft a payload exceeding 6000 bytes and paste it into the &#39;Folder with picture files&#39; field to trigger a denial of service condition.

Severity CVSS v4.0: MEDIUM

Last modification:

27/04/2026

Subscribe to Vulnerabilities