Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2021-22740

Publication date:

26/05/2021

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause information to be exposed when an unauthorized file is uploaded.

Severity CVSS v4.0: Pending analysis

Last modification:

03/06/2021

CVE-2021-22738

Publication date:

26/05/2021

Use of a Broken or Risky Cryptographic Algorithm vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access when credentials are discovered after a brute force attack.

Severity CVSS v4.0: Pending analysis

Last modification:

03/06/2021

CVE-2021-22739

Publication date:

26/05/2021

Information Exposure vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a device to be compromised when it is first configured.

Severity CVSS v4.0: Pending analysis

Last modification:

03/06/2021

CVE-2021-22737

Publication date:

26/05/2021

Insufficiently Protected Credentials vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior that could cause unauthorized access of when credentials are discovered after a brute force attack.

Severity CVSS v4.0: Pending analysis

Last modification:

20/01/2023

CVE-2021-22705

Publication date:

26/05/2021

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists that could cause denial of service or unauthorized access to system information when interacting directly with a driver installed by Vijeo Designer or EcoStruxure Machine Expert

Severity CVSS v4.0: Pending analysis

Last modification:

31/01/2022

CVE-2021-22731

Publication date:

26/05/2021

Weak Password Recovery Mechanism for Forgotten Password vulnerability exists on Modicon Managed Switch MCSESM* and MCSESP* V8.21 and prior which could cause an unauthorized password change through HTTP / HTTPS when basic user information is known by a remote attacker.

Severity CVSS v4.0: Pending analysis

Last modification:

01/02/2022

CVE-2020-22021

Publication date:

26/05/2021

Buffer Overflow vulnerability in FFmpeg 4.2 at filter_edges function in libavfilter/vf_yadif.c, which could let a remote malicious user cause a Denial of Service.

Severity CVSS v4.0: Pending analysis

Last modification:

05/11/2021

CVE-2020-22019

Publication date:

26/05/2021

Buffer Overflow vulnerability in FFmpeg 4.2 at convolution_y_10bit in libavfilter/vf_vmafmotion.c, which could let a remote malicious user cause a Denial of Service.

Severity CVSS v4.0: Pending analysis

Last modification:

05/11/2021

CVE-2020-22020

Publication date:

26/05/2021

Buffer Overflow vulnerability in FFmpeg 4.2 in the build_diff_map function in libavfilter/vf_fieldmatch.c, which could let a remote malicious user cause a Denial of Service.

Severity CVSS v4.0: Pending analysis

Last modification:

07/11/2023

CVE-2021-22732

Publication date:

26/05/2021

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause a code execution issue when an attacker loads unauthorized code on the web server.

Severity CVSS v4.0: Pending analysis

Last modification:

04/06/2021

CVE-2021-22733

Publication date:

26/05/2021

Improper Privilege Management vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder.

Severity CVSS v4.0: Pending analysis

Last modification:

04/06/2021

CVE-2021-22699

Publication date:

26/05/2021

Improper Input Validation vulnerability exists in Modicon M241/M251 logic controllers firmware prior to V5.1.9.1 that could cause denial of service when specific crafted requests are sent to the controller over HTTP.

Severity CVSS v4.0: Pending analysis

Last modification:

03/02/2022

Subscribe to Vulnerabilities