Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2002-1709
Publication date:
31/12/2002
SQL injection vulnerability in BasiliX Webmail 1.10 allows remote attackers to obtain sensitive information or possibly modify data via the id variable.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1710
Publication date:
31/12/2002
The attachment capability in Compose Mail in BasiliX Webmail 1.1.0 does not check whether the attachment was uploaded by the user or came from a HTTP POST, which could allow local users to steal sensitive information like a password file.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1711
Publication date:
31/12/2002
BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1712
Publication date:
31/12/2002
Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1713
Publication date:
31/12/2002
The Standard security setting for Mandrake-Security package (msec) in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1714
Publication date:
31/12/2002
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type "text/html" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1715
Publication date:
31/12/2002
SSH 1 through 3, and possibly other versions, allows local users to bypass restricted shells such as rbash or rksh by uploading a script to a world-writeable directory, then executing that script to gain normal shell access.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1716
Publication date:
31/12/2002
The Host() function in the Microsoft spreadsheet component on Microsoft Office XP allows remote attackers to create arbitrary files using the SaveAs capability.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1717
Publication date:
31/12/2002
Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1718
Publication date:
31/12/2002
Microsoft Internet Information Server (IIS) 5.1 may allow remote attackers to view the contents of a Frontpage Server Extension (FPSE) file, as claimed using an HTTP request for colegal.htm that contains .. (dot dot) sequences.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1719
Publication date:
31/12/2002
Unknown vulnerability in Bavo 0.3 allows remote attackers to modify posted messages.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026

CVE-2002-1720
Publication date:
31/12/2002
SQL injection vulnerability in Spooky Login 2.0 through 2.5 allows remote attackers to bypass authentication and gain privileges via the password field.
Severity CVSS v4.0: Pending analysis
Last modification:
16/06/2026
Subscribe to Vulnerabilities