Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2023-31723
Publication date:
17/05/2023
yasm 1.3.0.55.g101bc was discovered to contain a segmentation violation via the function expand_mmac_params at /nasm/nasm-pp.c.
Severity CVSS v4.0: Pending analysis
Last modification:
22/01/2025

CVE-2023-31701
Publication date:
17/05/2023
TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceRemove.
Severity CVSS v4.0: Pending analysis
Last modification:
22/01/2025

CVE-2023-31722
Publication date:
17/05/2023
There exists a heap buffer overflow in nasm 2.16.02rc1 (GitHub commit: b952891).
Severity CVSS v4.0: Pending analysis
Last modification:
22/01/2025

CVE-2023-31700
Publication date:
17/05/2023
TP-Link TL-WPA4530 KIT V2 (EU)_170406 and V2 (EU)_161115 is vulnerable to Command Injection via _httpRpmPlcDeviceAdd.
Severity CVSS v4.0: Pending analysis
Last modification:
22/01/2025

CVE-2023-31698
Publication date:
17/05/2023
Bludit v3.14.1 is vulnerable to Stored Cross Site Scripting (XSS) via SVG file on site logo. NOTE: the product's security model is that users are trusted by the administrator to insert arbitrary content (users cannot create their own accounts through self-registration).
Severity CVSS v4.0: Pending analysis
Last modification:
02/08/2024

CVE-2023-31699
Publication date:
17/05/2023
ChurchCRM v4.5.4 is vulnerable to Reflected Cross-Site Scripting (XSS) via image file.
Severity CVSS v4.0: Pending analysis
Last modification:
22/01/2025

CVE-2023-31902
Publication date:
17/05/2023
RPA Technology Mobile Mouse 3.6.0.4 is vulnerable to Remote Code Execution (RCE).
Severity CVSS v4.0: Pending analysis
Last modification:
22/01/2025

CVE-2023-31702
Publication date:
17/05/2023
SQL injection in the View User Profile in MicroWorld eScan Management Console 14.0.1400.2281 allows remote attacker to dump entire database and gain windows XP command shell to perform code execution on database server via GetUserCurrentPwd?UsrId=1.
Severity CVSS v4.0: Pending analysis
Last modification:
22/01/2025

CVE-2023-31703
Publication date:
17/05/2023
Cross Site Scripting (XSS) in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter.
Severity CVSS v4.0: Pending analysis
Last modification:
22/01/2025

CVE-2023-31903
Publication date:
17/05/2023
GuppY CMS 6.00.10 is vulnerable to Unrestricted File Upload which allows remote attackers to execute arbitrary code by uploading a php file.
Severity CVSS v4.0: Pending analysis
Last modification:
27/01/2025

CVE-2023-31904
Publication date:
17/05/2023
savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion.
Severity CVSS v4.0: Pending analysis
Last modification:
21/01/2025

CVE-2023-30438
Publication date:
17/05/2023
An internally discovered vulnerability in PowerVM on IBM Power9 and Power10 systems could allow an attacker with privileged user access to a logical partition to perform an undetected violation of the isolation between logical partitions which could lead to data leakage or the execution of arbitrary code in other logical partitions on the same physical server. IBM X-Force ID: 252706.
Severity CVSS v4.0: Pending analysis
Last modification:
25/05/2023
Subscribe to Vulnerabilities