CVE-2011-2405: Improper Input Validation

The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...

CVE-2008-2650: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including adm.ph...

CVE-2006-4889: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Telekorn SignKorn Guestbook SL 1.3 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter in 1 index.php, 2 includes/functions.gb.php, 3 includes/functions.admin.ph...

CVE-2006-4788: Undefined Security Weakness

PHP remote file inclusion vulnerability in includes/log.inc.php in Telekorn SignKorn Guestbook SL 1.3 and earlier, when registerglobals is enabled and SESSIONpermission parameter is set to "yes", allows remote attackers to execute arbitrary PHP code via a URL in the dirpath parameter...

CVE-2002-1975

The CVE-2002-1975 entry applies to Sharp Zaurus PDA models SL-5000D and SL-5500. The vulnerability arises from using a fixed salt value "A0" to encrypt the screen-locking password stored in Security.conf, which enables local attackers to more easily brute-force the password. Reported details from...

CVE-2002-1974

The CVE-2002-1974 entry concerns the FTP service in Zaurus PDAs SL-5000D and SL-5500 that does not require authentication, enabling remote attackers to access the file system as root. Affected component: FTP service on the specified Zaurus models. Root cause: unauthenticated access to the FTP ser...

CVE-2002-1974: Undefined Security Weakness

The FTP service in Zaurus PDAs SL-5000D and SL-5500 does not require authentication, which allows remote attackers to access the file system as root...

CVE-2002-1975: Inadequate Encryption Strength

Sharp Zaurus PDA SL-5000D and SL-5500 uses a salt of "A0" to encrypt the screen-locking password as stored in the Security.conf file, which makes it easier for local users to guess the password via brute force methods...

CVE-2004-0356

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...

CVE-2004-0357

Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via 1 user.dll, 2 loadpageadmin.dll or 3 loadpageuser.dll...

CVE-2004-0356

CVE-2004-0356: A stack-based buffer overflow in the Supervisor Report Center of SL Mail Pro 2.0.9 and earlier allows remote code execution via an HTTP request containing a long HTTP sub-version. Affects SL Mail Pro up to version 2.0.9; exploitation details are not provided in the connected docume...

CVE-2004-0356

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...

CVE-2004-0356: Undefined Security Weakness

Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version...

CVE-2004-0357

Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via 1 user.dll, 2 loadpageadmin.dll or 3 loadpageuser.dll...

CVE-2004-0357

SL Mail Pro 2.0.9 is affected by stack-based buffer overflows exploitable via (1) user.dll, (2) loadpageadmin.dll, or (3) loadpageuser.dll, potentially allowing remote code execution. A patch is available (SL Mail Patch 2.0.14) to mitigate. The connected documents confirm the affected components ...

CVE-2004-0357: Undefined Security Weakness

Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via 1 user.dll, 2 loadpageadmin.dll or 3 loadpageuser.dll...

PT-2002-2696 · Sharp · Sharp Zaurus Pda

Name of the Vulnerable Software and Affected Versions: Sharp Zaurus PDA versions SL-5000D and SL-5500 Description: The issue concerns the encryption of the screen-locking password stored in the Security.conf file. Specifically, a salt of "A0" is used, which makes it easier for local users to gues...