Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2023-37187
Publication date:
25/12/2023
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.
Severity CVSS v4.0: Pending analysis
Last modification:
25/04/2025

CVE-2023-37188
Publication date:
25/12/2023
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.
Severity CVSS v4.0: Pending analysis
Last modification:
25/04/2025

CVE-2023-47091
Publication date:
25/12/2023
An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.
Severity CVSS v4.0: Pending analysis
Last modification:
23/04/2025

CVE-2023-47247
Publication date:
25/12/2023
In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102.
Severity CVSS v4.0: Pending analysis
Last modification:
04/01/2024

CVE-2023-31297
Publication date:
25/12/2023
An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer) 6.3.8.6 718. There is XSS via the Name field when modifying a client.
Severity CVSS v4.0: Pending analysis
Last modification:
03/01/2024

CVE-2023-37185
Publication date:
25/12/2023
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.
Severity CVSS v4.0: Pending analysis
Last modification:
25/04/2025

CVE-2023-37186
Publication date:
25/12/2023
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
Severity CVSS v4.0: Pending analysis
Last modification:
25/04/2025

CVE-2023-28872
Publication date:
25/12/2023
Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\Temp\NcpSupport* location.
Severity CVSS v4.0: Pending analysis
Last modification:
03/01/2024

CVE-2022-41762
Publication date:
25/12/2023
An issue was discovered in NOKIA NFM-T R19.9. Multiple Reflected XSS vulnerabilities exist in the Network Element Manager via any parameter to log.pl, the bench or pid parameter to top.pl, or the id parameter to easy1350.pl.
Severity CVSS v4.0: Pending analysis
Last modification:
03/01/2024

CVE-2022-43675
Publication date:
25/12/2023
An issue was discovered in NOKIA NFM-T R19.9. Reflected XSS in the Network Element Manager exists via /oms1350/pages/otn/cpbLogDisplay via the filename parameter, under /oms1350/pages/otn/connection/E2ERoutingDisplayWithOverLay via the id parameter, and under /oms1350/pages/otn/mainOtn via all parameters.
Severity CVSS v4.0: Pending analysis
Last modification:
03/01/2024

CVE-2023-31289
Publication date:
25/12/2023
Pexip Infinity before 31.2 has Improper Input Validation for signalling, allowing remote attackers to trigger an abort.
Severity CVSS v4.0: Pending analysis
Last modification:
29/12/2023

CVE-2023-31455
Publication date:
25/12/2023
Pexip Infinity before 31.2 has Improper Input Validation for RTCP, allowing remote attackers to trigger an abort.
Severity CVSS v4.0: Pending analysis
Last modification:
29/12/2023
Subscribe to Vulnerabilities