Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2022-46809

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WPDeveloper ReviewX – Multi-criteria Rating &amp; Reviews for WooCommerce.This issue affects ReviewX – Multi-criteria Rating &amp; Reviews for WooCommerce: from n/a through 1.6.7.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2023

CVE-2022-46821

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Jackmail &amp; Sarbacane Emails &amp; Newsletters with Jackmail.This issue affects Emails &amp; Newsletters with Jackmail: from n/a through 1.2.22.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
16/11/2023

CVE-2023-0898

Publication date:
07/11/2023
<br /> General Electric MiCOM S1 Agile is vulnerable to an attacker achieving code execution by placing malicious DLL files in the directory of the application.<br /> <br /> <br /> <br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2023

CVE-2022-45370

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in WebToffee WordPress Comments Import &amp; Export.This issue affects WordPress Comments Import &amp; Export: from n/a through 2.3.1.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
19/02/2025

CVE-2022-45810

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Icegram Icegram Express – Email Marketing, Newsletters and Automation for WordPress &amp; WooCommerce.This issue affects Icegram Express – Email Marketing, Newsletters and Automation for WordPress &amp; WooCommerce: from n/a through 5.5.2.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
19/02/2025

CVE-2022-46801

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Paul Ryley Site Reviews.This issue affects Site Reviews: from n/a through 6.2.0.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2023

CVE-2022-46803

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2023

CVE-2022-46804

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Narola Infotech Solutions LLP Export Users Data Distinct.This issue affects Export Users Data Distinct: from n/a through 1.3.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2023

CVE-2022-45348

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in anmari amr users.This issue affects amr users: from n/a through 4.59.4.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
15/11/2023

CVE-2022-45360

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Scott Reilly Commenter Emails.This issue affects Commenter Emails: from n/a through 2.6.1.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
04/09/2024

CVE-2022-45078

Publication date:
07/11/2023
Improper Neutralization of Formula Elements in a CSV File vulnerability in Solwin Infotech User Blocker.This issue affects User Blocker: from n/a through 1.5.5.<br /> <br />
Severity CVSS v4.0: Pending analysis
Last modification:
14/11/2023

CVE-2023-47359

Publication date:
07/11/2023
Videolan VLC prior to version 3.0.20 contains an incorrect offset read that leads to a Heap-Based Buffer Overflow in function GetPacket() and results in a memory corruption.
Severity CVSS v4.0: Pending analysis
Last modification:
01/12/2023