Vulnerabilities

With the aim of informing, warning and helping professionals with the latest security vulnerabilities in technology systems, we have made a database available for users interested in this information, which is in Spanish and includes all of the latest documented and recognised vulnerabilities.

This repository, with over 75,000 registers, is based on the information from the NVD (National Vulnerability Database) – by virtue of a partnership agreement – through which INCIBE translates the included information into Spanish.

On occasions this list will show vulnerabilities that have still not been translated, as they are added while the INCIBE team is still carrying out the translation process. The CVE (Common Vulnerabilities and Exposures) Standard for Information Security Vulnerability Names is used with the aim to support the exchange of information between different tools and databases.

All vulnerabilities collected are linked to different information sources, as well as available patches or solutions provided by manufacturers and developers. It is possible to carry out advanced searches, as there is the option to select different criteria to narrow down the results, some examples being vulnerability types, manufacturers and impact levels, among others.

Through RSS feeds or Newsletters we can be informed daily about the latest vulnerabilities added to the repository. Below there is a list, updated daily, where you can discover the latest vulnerabilities.

CVE-2001-0899

Publication date:

16/11/2001

Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable.

Severity CVSS v4.0: Pending analysis

Last modification:

01/07/2019

CVE-2001-0898

Publication date:

15/11/2001

Opera 6.0 and earlier allows remote attackers to access sensitive information such as cookies and links for other domains via Javascript that uses setTimeout to (1) access data after a new window to the domain has been opened or (2) access data via about:cache.

Severity CVSS v4.0: Pending analysis

Last modification:

18/10/2016

CVE-2001-0895

Publication date:

15/11/2001

Multiple Cisco networking products allow remote attackers to cause a denial of service on the local network via a series of ARP packets sent to the router&#39;s interface that contains a different MAC address for the router, which eventually causes the router to overwrite the MAC address in its ARP table.

Severity CVSS v4.0: Pending analysis

Last modification:

10/10/2017

CVE-2001-0724

Publication date:

14/11/2001

Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the "Zone Spoofing Vulnerability variant" of CVE-2001-0664.

Severity CVSS v4.0: Pending analysis

Last modification:

23/07/2021

CVE-2001-0723

Publication date:

14/11/2001

Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the "Second Cookie Handling Vulnerability."

Severity CVSS v4.0: Pending analysis

Last modification:

23/07/2021

CVE-2001-0892

Publication date:

13/11/2001

Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.

Severity CVSS v4.0: Pending analysis

Last modification:

13/09/2021

CVE-2001-0893

Publication date:

13/11/2001

Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.

Severity CVSS v4.0: Pending analysis

Last modification:

13/09/2021

CVE-2001-1415

Publication date:

13/11/2001

vi.recover in OpenBSD before 3.1 allows local users to remove arbitrary zero-byte files such as device nodes.

Severity CVSS v4.0: Pending analysis

Last modification:

11/07/2017

CVE-2001-1429

Publication date:

12/11/2001

Buffer overflow in mcedit in Midnight Commander 4.5.1 allows local users to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted text file.

Severity CVSS v4.0: Pending analysis

Last modification:

11/07/2017

CVE-2001-0894

Publication date:

11/11/2001

Vulnerability in Postfix SMTP server before 20010228-pl07, when configured to email the postmaster when SMTP errors cause the session to terminate, allows remote attackers to cause a denial of service (memory exhaustion) by generating a large number of SMTP errors, which forces the SMTP session log to grow too large.

Severity CVSS v4.0: Pending analysis

Last modification:

10/10/2017

CVE-2001-1387

Publication date:

05/11/2001

iptables-save in iptables before 1.2.4 records the "--reject-with icmp-host-prohibited" rule as "--reject-with tcp-reset," which causes iptables to generate different responses than specified by the administrator, possibly leading to an information leak.

Severity CVSS v4.0: Pending analysis

Last modification:

14/02/2024

CVE-2001-1388

Publication date:

05/11/2001

iptables before 1.2.4 does not accurately convert rate limits that are specified on the command line, which could allow attackers or users to generate more or less traffic than intended by the administrator.

Severity CVSS v4.0: Pending analysis

Last modification:

02/02/2021

Subscribe to Vulnerabilities