Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2023-46550

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.
Severity CVSS v4.0: Pending analysis
Last modification:
01/11/2023

CVE-2023-46551

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formReflashClientTbl.
Severity CVSS v4.0: Pending analysis
Last modification:
01/11/2023

CVE-2023-46552

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAP.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46553

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formParentControl.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46554

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDel.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46555

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formPortFw.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46556

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formFilter.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46557

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMultiAPVLAN.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46558

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formMapDelDevice.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46559

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formIPv6Addr.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46560

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formTcpipSetup.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024

CVE-2023-46562

Publication date:
25/10/2023
TOTOLINK X2000R Gh v1.0.0-B20230221.0948.web was discovered to contain a stack overflow via the function formDosCfg.
Severity CVSS v4.0: Pending analysis
Last modification:
11/09/2024