Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2024-48034

Publication date:
16/10/2024
Unrestricted Upload of File with Dangerous Type vulnerability in Fliperrr Team Creates 3D Flipbook, PDF Flipbook allows Upload a Web Shell to a Web Server.This issue affects Creates 3D Flipbook, PDF Flipbook: from n/a through 1.2.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-48035

Publication date:
16/10/2024
Unrestricted Upload of File with Dangerous Type vulnerability in Takayuki Imanishi ACF Images Search And Insert allows Upload a Web Shell to a Web Server.This issue affects ACF Images Search And Insert: from n/a through 1.1.4.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-49216

Publication date:
16/10/2024
Unrestricted Upload of File with Dangerous Type vulnerability in Joshua Clayton Feed Comments Number allows Upload a Web Shell to a Web Server.This issue affects Feed Comments Number: from n/a through 0.2.1.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-49218

Publication date:
16/10/2024
Deserialization of Untrusted Data vulnerability in Al Imran Akash Recently allows Object Injection.This issue affects Recently: from n/a through 1.1.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-48027

Publication date:
16/10/2024
Unrestricted Upload of File with Dangerous Type vulnerability in xaraartech External featured image from bing allows Upload a Web Shell to a Web Server.This issue affects External featured image from bing: from n/a through 1.0.2.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-48028

Publication date:
16/10/2024
Deserialization of Untrusted Data vulnerability in Boyan Raichev IP Loc8 allows Object Injection.This issue affects IP Loc8: from n/a through 1.1.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-48029

Publication date:
16/10/2024
: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Hung Trang Si SB Random Posts Widget allows PHP Local File Inclusion.This issue affects SB Random Posts Widget: from n/a through 1.0.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-48030

Publication date:
16/10/2024
Deserialization of Untrusted Data vulnerability in Gabriele Valenti Telecash Ricaricaweb allows Object Injection.This issue affects Telecash Ricaricaweb: from n/a through 2.2.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-47637

Publication date:
16/10/2024
: Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Path Traversal.This issue affects LiteSpeed Cache: from n/a through 6.4.1.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-47645

Publication date:
16/10/2024
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Sajid Javed Top Bar – PopUps – by WPOptin allows PHP Local File Inclusion.This issue affects Top Bar – PopUps – by WPOptin: from n/a through 2.0.1.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-47649

Publication date:
16/10/2024
Unrestricted Upload of File with Dangerous Type vulnerability in THATplugin Iconize.This issue affects Iconize: from n/a through 1.2.4.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024

CVE-2024-48026

Publication date:
16/10/2024
Deserialization of Untrusted Data vulnerability in Grayson Robbins Disc Golf Manager allows Object Injection.This issue affects Disc Golf Manager: from n/a through 1.0.0.
Severity CVSS v4.0: Pending analysis
Last modification:
16/10/2024