Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2023-32965
Publication date:
18/07/2023
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in CRUDLab Jazz Popups plugin
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023

CVE-2022-41409
Publication date:
18/07/2023
Integer overflow vulnerability in pcre2test before 10.41 allows attackers to cause a denial of service or other unspecified impacts via negative input.
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023

CVE-2023-30906
Publication date:
18/07/2023
The vulnerability could be locally exploited to allow escalation of privilege.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023

CVE-2022-47085
Publication date:
18/07/2023
An issue was discovered in ostree before 2022.7 allows attackers to cause a denial of service or other unspecified impacts via the print_panic function in repo_checkout_filter.rs.
Severity CVSS v4.0: Pending analysis
Last modification:
20/12/2023

CVE-2022-34155
Publication date:
18/07/2023
Improper Authentication vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) plugin allows Authentication Bypass.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 6.23.3.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023

CVE-2022-33065
Publication date:
18/07/2023
Multiple signed integers overflow in function au_read_header in src/au.c and in functions mat4_open and mat4_read_header in src/mat4.c in Libsndfile, allows an attacker to cause Denial of Service or other unspecified impacts.
Severity CVSS v4.0: Pending analysis
Last modification:
02/08/2023

CVE-2021-32256
Publication date:
18/07/2023
An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.36. It is a stack-overflow issue in demangle_type in rust-demangle.c.
Severity CVSS v4.0: Pending analysis
Last modification:
24/08/2023

CVE-2022-33064
Publication date:
18/07/2023
An off-by-one error in function wav_read_header in src/wav.c in Libsndfile 1.1.0, results in a write out of bound, which allows an attacker to execute arbitrary code, Denial of Service or other unspecified impacts.
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023

CVE-2022-26563
Publication date:
18/07/2023
An issue was discovered in Tildeslash Monit before 5.31.0, allows remote attackers to gain escilated privlidges due to improper PAM-authorization.
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023

CVE-2021-34123
Publication date:
18/07/2023
An issue was discovered on atasm, version 1.09. A stack-buffer-overflow vulnerability in function aprintf() in asm.c allows attackers to execute arbitrary code on the system via a crafted file.
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023

CVE-2021-34119
Publication date:
18/07/2023
A flaw was discovered in htmodoc 1.9.12 in function parse_paragraph in ps-pdf.cxx ,this flaw possibly allows possible code execution and a denial of service via a crafted file.
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023

CVE-2021-34121
Publication date:
18/07/2023
An Out of Bounds flaw was discovered in htmodoc 1.9.12 in function parse_tree() in toc.cxx, this possibly leads to memory layout information leaking in the data. This might be used in a chain of vulnerability in order to reach code execution.
Severity CVSS v4.0: Pending analysis
Last modification:
27/07/2023
Subscribe to Vulnerabilities