Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2018-16970

Publication date:

12/09/2018

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to download non-purchased course files via a modified id parameter.

Severity CVSS v4.0: Pending analysis

Last modification:

21/11/2018

CVE-2018-16962

Publication date:

12/09/2018

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.

Severity CVSS v4.0: Pending analysis

Last modification:

08/09/2021

CVE-2018-16971

Publication date:

12/09/2018

Wisetail Learning Ecosystem (LE) through v4.11.6 allows insecure direct object reference (IDOR) attacks to access non-purchased course contents (quiz / test) via a modified id parameter.

Severity CVSS v4.0: Pending analysis

Last modification:

24/08/2020

CVE-2018-3686

Publication date:

12/09/2018

Code injection vulnerability in INTEL-SA-00086 Detection Tool before version 1.2.7.0 may allow a privileged user to potentially execute arbitrary code via local access.

Severity CVSS v4.0: Pending analysis

Last modification:

07/11/2018

CVE-2018-3659

Publication date:

12/09/2018

A vulnerability in Intel PTT module in Intel CSME firmware before version 12.0.5 and Intel TXE firmware before version 4.0 may allow an unauthenticated user to potentially disclose information via physical access.

Severity CVSS v4.0: Pending analysis

Last modification:

03/10/2019

CVE-2018-3669

Publication date:

12/09/2018

A STOP error (BSoD) in the ibtfltcoex.sys driver for Intel Centrino Wireless N and Intel Centrino Advanced N adapters may allow an unauthenticated user to potentially send a malformed L2CAP Connection Request is sent to the Intel Bluetooth device via the network.

Severity CVSS v4.0: Pending analysis

Last modification:

03/10/2019

CVE-2018-3679

Publication date:

12/09/2018

Escalation of privilege in Reference UI in Intel Data Center Manager SDK 5.0 and before may allow an unauthorized remote unauthenticated user to potentially execute code via administrator privileges.

Severity CVSS v4.0: Pending analysis

Last modification:

03/10/2019

CVE-2018-12175

Publication date:

12/09/2018

Default install directory permissions in Intel Distribution for Python (IDP) version 2018 may allow an unprivileged user to escalate privileges via local access.

Severity CVSS v4.0: Pending analysis

Last modification:

03/10/2019

CVE-2018-12176

Publication date:

12/09/2018

Improper input validation in firmware for Intel NUC Kits may allow a privileged user to potentially execute arbitrary code resulting in information disclosure, escalation of privilege and/or denial of service via local access.

Severity CVSS v4.0: Pending analysis

Last modification:

03/10/2019

CVE-2018-3643

Publication date:

12/09/2018

A vulnerability in Power Management Controller firmware in systems using specific Intel(R) Converged Security and Management Engine (CSME) before version 11.8.55, 11.11.55, 11.21.55, 12.0.6 or Intel(R) Server Platform Services firmware before version 4.x.04 may allow an attacker with administrative privileges to uncover certain platform secrets via local access or to potentially execute arbitrary code.

Severity CVSS v4.0: Pending analysis

Last modification:

03/10/2019

CVE-2018-3655

Publication date:

12/09/2018

A vulnerability in a subsystem in Intel CSME before version 11.21.55, Intel Server Platform Services before version 4.0 and Intel Trusted Execution Engine Firmware before version 3.1.55 may allow an unauthenticated user to potentially modify or disclose information via physical access.

Severity CVSS v4.0: Pending analysis

Last modification:

03/10/2019

CVE-2018-3616

Publication date:

12/09/2018

Bleichenbacher-style side channel vulnerability in TLS implementation in Intel Active Management Technology before 12.0.5 may allow an unauthenticated user to potentially obtain the TLS session key via the network.

Severity CVSS v4.0: Pending analysis

Last modification:

17/08/2023

Subscribe to Vulnerabilities