Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2003-0613

Publication date:

27/08/2003

Buffer overflow in zblast-svgalib of zblast 1.2.1 and earlier allows local users to execute arbitrary code via the high score file.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0614

Publication date:

27/08/2003

Cross-site scripting (XSS) vulnerability in search.php of Gallery 1.1 through 1.3.4 allows remote attackers to insert arbitrary web script via the searchstring parameter.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0615

Publication date:

27/08/2003

Cross-site scripting (XSS) vulnerability in start_form() of CGI.pm allows remote attackers to insert web script via a URL that is fed into the form&#39;s action parameter.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0616

Publication date:

27/08/2003

Format string vulnerability in ePO service for McAfee ePolicy Orchestrator 2.0, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code via a POST request with format strings in the computerlist parameter, which are used when logging a failed name resolution.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0617

Publication date:

27/08/2003

mindi 0.58 and earlier does not properly create temporary files, which allows local users to overwrite arbitrary files.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0619

Publication date:

27/08/2003

Integer signedness error in the decode_fh function of nfs3xdr.c in Linux kernel before 2.4.21 allows remote attackers to cause a denial of service (kernel panic) via a negative size value within XDR data of an NFSv3 procedure call.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0620

Publication date:

27/08/2003

Multiple buffer overflows in man-db 2.4.1 and earlier, when installed setuid, allow local users to gain privileges via (1) MANDATORY_MANPATH, MANPATH_MAP, and MANDB_MAP arguments to add_to_dirlist in manp.c, (2) a long pathname to ult_src in ult_src.c, (3) a long .so argument to test_for_include in ult_src.c, (4) a long MANPATH environment variable, or (5) a long PATH environment variable.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0625

Publication date:

27/08/2003

Off-by-one error in certain versions of xfstt allows remote attackers to read potentially sensitive memory via a malformed client request in the connection handshake, which leaks the memory in the server&#39;s response.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0631

Publication date:

27/08/2003

VMware GSX Server 2.5.1 build 4968 and earlier, and Workstation 4.0 and earlier, allows local users to gain root privileges via certain enivronment variables that are used when launching a virtual machine session.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0632

Publication date:

27/08/2003

Buffer overflow in the Oracle Applications Web Report Review (FNDWRR) CGI program (FNDWRR.exe) of Oracle E-Business Suite 11.0 and 11.5.1 through 11.5.8 may allow remote attackers to execute arbitrary code via a long URL.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0633

Publication date:

27/08/2003

Multiple vulnerabilities in aoljtest.jsp of Oracle Applications AOL/J Setup Test Suite in Oracle E-Business Suite 11.5.1 through 11.5.8 allow a remote attacker to obtain sensitive information without authentication, such as the GUEST user password and the application server security key.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

CVE-2003-0634

Publication date:

27/08/2003

Stack-based buffer overflow in the PL/SQL EXTPROC functionality for Oracle9i Database Release 2 and 1, and Oracle 8i, allows authenticated database users, and arbitrary database users in some cases, to execute arbitrary code via a long library name.

Severity CVSS v4.0: Pending analysis

Last modification:

03/04/2025

Subscribe to Vulnerabilities