Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

Go to Calendar     Go to Press Room     Go to Newsletters subscription

Search

Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE  (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2023-47772
Publication date:
20/11/2023
Contributor+ Stored Cross-Site Scripting (XSS) vulnerability in Slider Revolution
Severity CVSS v4.0: Pending analysis
Last modification:
27/11/2023

CVE-2023-48039
Publication date:
20/11/2023
GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75.
Severity CVSS v4.0: Pending analysis
Last modification:
30/11/2023

CVE-2023-48090
Publication date:
20/11/2023
GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329.
Severity CVSS v4.0: Pending analysis
Last modification:
30/11/2023

CVE-2023-6196
Publication date:
20/11/2023
The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.4. This is due to missing or incorrect nonce validation on the function audio_merchant_add_audio_file function. This makes it possible for unauthenticated attackers to upload arbitrary files via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Severity CVSS v4.0: Pending analysis
Last modification:
25/11/2023

CVE-2023-5593
Publication date:
20/11/2023
The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message.
Severity CVSS v4.0: Pending analysis
Last modification:
30/11/2023

CVE-2023-6045
Publication date:
20/11/2023
in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion.
Severity CVSS v4.0: Pending analysis
Last modification:
09/09/2024

CVE-2023-42774
Publication date:
20/11/2023
in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information through incorrect default permissions.
Severity CVSS v4.0: Pending analysis
Last modification:
09/09/2024

CVE-2023-43612
Publication date:
20/11/2023
in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions.
Severity CVSS v4.0: Pending analysis
Last modification:
09/09/2024

CVE-2023-46100
Publication date:
20/11/2023
in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource.
Severity CVSS v4.0: Pending analysis
Last modification:
09/09/2024

CVE-2023-46705
Publication date:
20/11/2023
in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion.
Severity CVSS v4.0: Pending analysis
Last modification:
09/09/2024

CVE-2023-47217
Publication date:
20/11/2023
in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow.
Severity CVSS v4.0: Pending analysis
Last modification:
09/09/2024

CVE-2023-3116
Publication date:
20/11/2023
in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information or rewrite sensitive file through incorrect default permissions.
Severity CVSS v4.0: Pending analysis
Last modification:
09/09/2024
Subscribe to Vulnerabilities