Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2018-5208
Publication date:
06/01/2018
In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings.
Severity CVSS v4.0: Pending analysis
Last modification:
12/03/2019

CVE-2018-5206
Publication date:
06/01/2018
When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer.
Severity CVSS v4.0: Pending analysis
Last modification:
12/03/2019

CVE-2018-5252
Publication date:
05/01/2018
libimageworsener.a in ImageWorsener 1.3.2, when libjpeg 8d is used, has a large loop in the get_raw_sample_int function in imagew-main.c.
Severity CVSS v4.0: Pending analysis
Last modification:
03/10/2019

CVE-2018-5253
Publication date:
05/01/2018
The AP4_FtypAtom class in Core/Ap4FtypAtom.cpp in Bento4 1.5.1.0 has an Infinite loop via a crafted MP4 file that triggers size mishandling.
Severity CVSS v4.0: Pending analysis
Last modification:
03/10/2019

CVE-2018-5249
Publication date:
05/01/2018
Cross-site scripting (XSS) vulnerability in Shaarli before 0.8.5 and 0.9.x before 0.9.3 allows remote attackers to inject arbitrary code via the login form's username field (aka the login parameter to the ban_canLogin function in index.php).
Severity CVSS v4.0: Pending analysis
Last modification:
17/01/2018

CVE-2018-5251
Publication date:
05/01/2018
In libming 0.4.8, there is an integer signedness error vulnerability (left shift of a negative value) in the readSBits function (util/read.c). Remote attackers can leverage this vulnerability to cause a denial of service via a crafted swf file.
Severity CVSS v4.0: Pending analysis
Last modification:
03/10/2019

CVE-2017-18021
Publication date:
05/01/2018
It was discovered that QtPass before 1.2.1, when using the built-in password generator, generates possibly predictable and enumerable passwords. This only applies to the QtPass GUI.
Severity CVSS v4.0: Pending analysis
Last modification:
18/01/2018

CVE-2018-5248
Publication date:
05/01/2018
In ImageMagick 7.0.7-17 Q16, there is a heap-based buffer over-read in coders/sixel.c in the ReadSIXELImage function, related to the sixel_decode function.
Severity CVSS v4.0: Pending analysis
Last modification:
12/03/2019

CVE-2017-18022
Publication date:
05/01/2018
In ImageMagick 7.0.7-12 Q16, there are memory leaks in MontageImageCommand in MagickWand/montage.c.
Severity CVSS v4.0: Pending analysis
Last modification:
03/10/2019

CVE-2018-5246
Publication date:
05/01/2018
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadPATTERNImage in coders/pattern.c.
Severity CVSS v4.0: Pending analysis
Last modification:
03/10/2019

CVE-2018-5247
Publication date:
05/01/2018
In ImageMagick 7.0.7-17 Q16, there are memory leaks in ReadRLAImage in coders/rla.c.
Severity CVSS v4.0: Pending analysis
Last modification:
03/10/2019

CVE-2018-5244
Publication date:
05/01/2018
In Xen 4.10, new infrastructure was introduced as part of an overhaul to how MSR emulation happens for guests. Unfortunately, one tracking structure isn't freed when a vcpu is destroyed. This allows guest OS administrators to cause a denial of service (host OS memory consumption) by rebooting many times.
Severity CVSS v4.0: Pending analysis
Last modification:
31/10/2018
Subscribe to Vulnerabilities