Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2022-44316

Publication date:

08/11/2022

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the LexGetStringConstant function in lex.c when called from LexScanGetToken.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-44318

Publication date:

08/11/2022

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrcat function in cstdlib/string.c when called from ExpressionParseFunctionCall.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-44319

Publication date:

08/11/2022

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StdioBasePrintf function in cstdlib/string.c when called from ExpressionParseFunctionCall.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-44320

Publication date:

08/11/2022

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceFP function in expression.c when called from ExpressionParseFunctionCall.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-43343

Publication date:

08/11/2022

N-Prolog v1.91 was discovered to contain a global buffer overflow vulnerability in the function gettoken() at Main.c.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-44312

Publication date:

08/11/2022

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceInteger function in expression.c when called from ExpressionInfixOperator.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-44313

Publication date:

08/11/2022

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionCoerceUnsignedInteger function in expression.c when called from ExpressionParseFunctionCall.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-44314

Publication date:

08/11/2022

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the StringStrncpy function in cstdlib/string.c when called from ExpressionParseFunctionCall.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-44315

Publication date:

08/11/2022

PicoC Version 3.2.2 was discovered to contain a heap buffer overflow in the ExpressionAssign function in expression.c when called from ExpressionParseFunctionCall.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-44311

Publication date:

08/11/2022

html2xhtml v1.3 was discovered to contain an Out-Of-Bounds read in the function static void elm_close(tree_node_t *nodo) at procesador.c. This vulnerability allows attackers to access sensitive files or cause a Denial of Service (DoS) via a crafted html file.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025

CVE-2022-41757

Publication date:

08/11/2022

An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to obtain write access to read-only memory, or obtain access to already freed memory. This affects Valhall r29p0 through r38p1 before r38p2, and r39p0 before r40p0.

Severity CVSS v4.0: Pending analysis

Last modification:

01/05/2025