CVE-2026-3494_Verfication

CVE-2026-3494 - Verificación de Registro de Auditoría del Plugin serveraudit de MariaDB PoC Este proyecto proporciona un entorno especializado para verificar y analizar una posible omisión del registro de auditoría en el plugin serveraudit de MariaDB cuando se utilizan comentarios en línea...

EUVD-2008-3932

Malware in sbrugna...

CVE-2025-24860: Incorrect Authorization

Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer. Users with restricted data center access can update their own permissions via data control...

decentraland-gatsby (>=5.76.0, <=5.77.1) potentially affected by CVE-2023-41049 via @dcl/single-sign-on-client (0.0.13)

@dcl/single-sign-on-client NPM version 0.0.13 is affected by a known vulnerability. The following packages have a transitive dependency on @dcl/single-sign-on-client and may be impacted: - decentraland-gatsby =5.76.0, =5.77.1 Source cves: CVE-2023-41049 Source advisory: OSV:GHSA-VP4F-WXGW-7X8X...

Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client

Impact Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix ts SSO.init'javascript:alert"javascript successfully injected"' Patches This vulnerability was patched on version 0.1.0 Workarounds This vulnerability can be prevented if...

CVE-2023-41049 Improper Neutralization of Script in Attributes in @dcl/single-sign-on-client

@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix. This vulnerability has been patched on version 0.1.0. Users are...

CVE-2023-41049: Improper Neutralization of Input During Web Page Generation

@dcl/single-sign-on-client is an open source npm library which deals with single sign on authentication flows. Improper input validation in the init function allows arbitrary javascript to be executed using the javascript: prefix. This vulnerability has been patched on version 0.1.0. Users are...

PT-2023-27760 · Unknown · @Dcl/Single-Sign-On-Client

Name of the Vulnerable Software and Affected Versions: @dcl/single-sign-on-client versions prior to 0.1.0 Description: The issue concerns improper input validation in the init function, allowing arbitrary JavaScript to be executed using the javascript: prefix. This can be exploited by passing...

GaussDB: Enable DCL Audit

If AUDITLEVEL is set to 2, only Data Control Language DCL operations are audited. DCL is used to set or change the permissions for database sessions and objects. DCL operations include COMMIT, ROLLBACK, GRANT, REVOKE, SHUTDOWN, and LOCK TABLE. SPDX-FileCopyrightText: 2020 Greenbone AG Some text...

ZSQL: Audit Level

Audit logs are important in tracing data, locating faults, and clarifying responsibilities after security events occur. Database audit is configured by setting the AUDITLEVEL parameter. AUDITLEVEL = 0 disables audit logs. If AUDITLEVEL is set to a value greater than 0, audit logs are enabled, and...

CVE-2017-17482

An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is...

CVE-2017-17482

An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is...

CVE-2017-17482

OpenVMS has a local privilege escalation vulnerability CVE-2017-17482 caused by a malformed DCL command table that can trigger a buffer overflow. Affected: OpenVMS on Alpha (V8.4-2L2) and IA64 (V8.4-2L1), and VAX/VMS 4.0 and later. Impact: local privilege escalation for non-privileged users; the ...

CVE-2017-17482: Improper Restriction of Operations within the Bounds of a Memory Buffer

An issue was discovered in OpenVMS through V8.4-2L2 on Alpha and through V8.4-2L1 on IA64, and VAX/VMS 4.0 and later. A malformed DCL command table may result in a buffer overflow allowing a local privilege escalation when a non-privileged account enters a crafted command line. This bug is...

The invasion of Spy satellite system technologies-vulnerability warning-the black bar safety net

VAX: VAX stands for Virtual Address Extension. The VAX computer is due to hardware limitations, is designed to store the address, so that it can be a simple operation to some great adapted to store the program. The VAX computer system is the DESDigital Equipment CorporationCompany design...

CVE-2008-3947

DCL aka the CLI in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line...

CVE-2008-3947

CVE-2008-3947 affects OpenVMS Alpha 8.3 (DCL). Local users can gain privileges via a long command line. CVSSv2 base score 7.2 (HIGH). No remediation or exploit details are provided in the connected documents.

CVE-2008-3947: Improper Input Validation

DCL aka the CLI in OpenVMS Alpha 8.3 allows local users to gain privileges via a long command line...

CVE-2002-1037

CVE-2002-1037 describes a cross-site scripting vulnerability in Double Choco Latte (DCL) prior to 20020706. The issue allows remote attackers to inject arbitrary HTML, including script, into web pages via seven features: Ticket# Find, Priorities, Severities, Projects, WO# Find, Departments, and U...

CVE-2002-1038: Undefined Security Weakness

Double Choco Latte DCL before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the 1 Projects: Upload File Attachment or 2 Work Orders: Import features...