Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2007-0519 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.493Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in memcp.php in XMB U2U Instant Messenger allows remote authenticated users to inject arbitrary web script or HTML via the recipient field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457630/100/0/threaded - http://securityreason.com/securityalert/2182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31661 - http://aria-security.com/forum/showthread.php?p=129 - https://docs.xmbforum2.com/index.php?title=Security_Issue_His
61 - http://aria-security.com/forum/showthread.php?p=129 - https://docs.xmbforum2.com/index.php?title=Security_Issue_History
CVE ID: CVE-2007-0520 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.495Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in banner.php in Unique Ads (UDS) 1.x allows remote attackers to execute arbitrary SQL commands via the bid parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31660 - http://www.securityfocus.com/archive/1/457667/100/0/threaded - http://securityreason.com/securityalert/2181
CVE ID: CVE-2007-0521 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.498Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sony Ericsson K700i and W810i phones allow remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2180 - http://www.securityfocus.com/archive/1/457797/100/0/threaded - http://www.securityfocus.com/archive/1/457768/100/0/threaded
CVE ID: CVE-2007-0522 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2180 - http://www.securityfocus.com/archive/1/457797/100/0/threaded - http://www.securityfocus.com/archive/1/457768/100/0/threaded
CVE ID: CVE-2007-0523 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Nokia N70 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2180 - http://www.securityfocus.com/archive/1/457797/100/0/threaded - http://www.securityfocus.com/archive/1/457768/100/0/threaded
CVE ID: CVE-2007-0524 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.373Z Vendors: n/a Products: n/a Problem Types: n/a Description: The LG Chocolate KG800 phone allows remote attackers to cause a denial of service (continual modal dialogs and UI unavailability) by repeatedly trying to OBEX push a file over Bluetooth, as demonstrated by ussp-push. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2180 - http://www.securityfocus.com/archive/1/457797/100/0/threaded - http://www.securityfocus.com/archive/1/457768/100/0/threaded
CVE ID: CVE-2007-0525 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Nickolas Grigoriadis Mini Web server (MiniWebsvr) before 0.05 have unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/33512 - http://sourceforge.net/project/shownotes.php?release_id=479480&group_id=187000 - http://www.vupen.com/english/advisories/2007/0294
CVE ID: CVE-2007-0526 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.363Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.3.1 allow remote attackers to inject arbitrary web script or HTML via the URL (PATH_INFO) to (1) articles/edit.php, (2) articles/list.php, (3) blogs/list_blogs.php, or (4) blogs/rankings.php. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2186 - http://osvdb.org/33579 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31655 - http://osvdb.org/33578 - http://www.securityfocus.com/archive/1/457695/100/
.xforce.ibmcloud.com/vulnerabilities/31655 - http://osvdb.org/33578 - http://www.securityfocus.com/archive/1/457695/100/0/threaded - http://osvdb.org/33580 - http://osvdb.org/33581
CVE ID: CVE-2007-0527 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.560Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the is_remembered function in class.login.php in Website Baker 2.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the REMEMBER_KEY cookie parameter. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23828 - http://securityreason.com/securityalert/2185 - http://www.vupen.com/english/advisories/2007/0311 - http://osvdb.org/32945 - https://exchange.xforce.i
urityalert/2185 - http://www.vupen.com/english/advisories/2007/0311 - http://osvdb.org/32945 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31692 - http://www.securityfocus.com/bid/22176 - http://www.securityfocus.com/archive/1/457684/100/0/threaded
CVE ID: CVE-2007-0528 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: The admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset and firmware 1.54 and earlier, as provided by various IP phones, does not require passwords or authentication tokens when using HTTP, which allows remote attackers to connect to existing superuser sessions and obtain sensitive information (passwords and configuration data). Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23936 - http://www.vupen.com/english/advisories/2007/0346 - http://
ntainer: References: - http://secunia.com/advisories/23936 - http://www.vupen.com/english/advisories/2007/0346 - http://www.procheckup.com/Vulner_PR0614.php - http://www.securityfocus.com/archive/1/457868/100/0/threaded - http://secunia.com/advisories/23919 - http://osvdb.org/32966 - https://www.exploit-db.com/exploits/3189
CVE ID: CVE-2007-0529 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.548Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.html (aka the administration page) in PHP Link Directory (phpLD) 3.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted link, which is triggered when the administrator uses the "Validate Links" functionality. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/32952 - http://www.securityfocus.com/archive/1/457672/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31662 - http://www.smilehou
s.com/archive/1/457672/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31662 - http://www.smilehouse.com/advisory/phplinkdirectory_070121.txt
CVE ID: CVE-2007-0530 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.563Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple PHP remote file inclusion vulnerabilities in Advanced Guestbook 2.4.2 allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) index.php, (2) addentry.php, or (3) picture.php, a different set of vectors than CVE-2006-5804. NOTE: this issue has been disputed by third party researchers, stating that the include_path variable is instantiated before use Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457955/100/0/threaded -
al Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457955/100/0/threaded - http://www.securityfocus.com/archive/1/457870/100/0/threaded
CVE ID: CVE-2007-0531 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4 before 20070123 allows remote attackers to execute arbitrary PHP code via a URL in the lang_file parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31732 - http://securitytracker.com/id?1017549 - http://www.freewebshop.org/?id=36 - http://secunia.com/advisories/23898 - http://osvdb.org/32951 - http://14house.blogspot.com/2007/01/freewebshoporg-remote-file-inc
cunia.com/advisories/23898 - http://osvdb.org/32951 - http://14house.blogspot.com/2007/01/freewebshoporg-remote-file-inclusion.html - http://www.vupen.com/english/advisories/2007/0319
CVE ID: CVE-2007-0532 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tuan Do Uploader (aka php-uploader) 6 beta 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrator password hash via a direct request for userdata/user_1.txt. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31683 - http://www.securityfocus.com/archive/1/457698/100/0/threaded - http://securityreason.com/securityalert/2187
CVE ID: CVE-2007-0533 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.520Z Vendors: n/a Products: n/a Problem Types: n/a Description: The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457947/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31685 - http://secunia.com/advisories/23902 -
7947/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31685 - http://secunia.com/advisories/23902 - http://www.securityfocus.com/bid/22185 - http://www.vupen.com/english/advisories/2007/0355 - http://blogs.atozed.com/Olaf/20070124A.en.aspx - http://www.securityfocus.com/archive/1/457758/100/0/threaded - http://blogs.atozed.com/Olaf/20070124.en.aspx - http://www.securityfocus.com/archive/1/458121/100/0/threaded - http://osvdb.org/32973
CVE ID: CVE-2007-0534 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0 through 5.x before 20070123 and (2) Project 4.6.0 through 5.x before 20070123 modules for Drupal allow remote authenticated users to inject arbitrary web script or HTML via (a) certain "fields on project nodes" or (b) "certain project-specific settings regarding issue tracking." Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31728 - http://www.securityfocus.com/bid/2
Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31728 - http://www.securityfocus.com/bid/22224 - http://osvdb.org/32133 - http://www.vupen.com/english/advisories/2007/0312 - http://secunia.com/advisories/23908 - http://drupal.org/node/112146
CVE ID: CVE-2007-0535 State: PUBLISHED Published: 2007-01-26T01:00:00 Last Updated: 2024-08-07T12:19:30.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple eval injection vulnerabilities in Vote! Pro 4.0, and possibly earlier, allow remote attackers to execute arbitrary code via requests to unspecified PHP scripts with the poll_id parameter, which is supplied to eval function calls, a different set of vectors than CVE-2007-0504. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0300 - http://osvdb.o
Analyst Notes: - CVE Program Container: References: - http://www.vupen.com/english/advisories/2007/0300 - http://osvdb.org/31606 - http://secunia.com/advisories/23834
CVE ID: CVE-2007-0536 State: PUBLISHED Published: 2007-01-27T00:00:00 Last Updated: 2024-08-07T12:19:30.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: The chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes packages to be installed with insecure permissions and might allow local users to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23922 - https://issues.rpath.com/browse/RPL-987 - http://lists.rpath.com/pipermail/security-announce/2007-January/000137.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/31942 - http://osvdb.org/32972
CVE ID: CVE-2007-0537 State: PUBLISHED Published: 2007-01-29T16:00:00 Last Updated: 2024-08-07T12:19:30.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct cross-site scripting (XSS) attacks and bypass some XSS protection schemes by embedding certain HTML tags within a comment in a title tag, a related issue to CVE-2007-0478. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2007-0909.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:157 - http://secunia.com/advisories/
a/RHSA-2007-0909.html - http://www.mandriva.com/security/advisories?name=MDKSA-2007:157 - http://secunia.com/advisories/24889 - http://secunia.com/advisories/23932 - http://www.novell.com/linux/security/advisories/2007_6_sr.html - http://www.kde.org/info/security/advisory-20070206-1.txt - http://osvdb.org/32975 - http://www.gentoo.org/security/en/glsa/glsa-200703-10.xml - http://www.securityfocus.com/archive/1/457924/100/0/threaded - http://www.ubuntu.com/usn/usn-420-1 - http://secunia.com/advisories/27108 - https://issues.rpath.com/browse/RPL-1117 - http://secunia.com/advisories/24463 - http://securitytracker.com/id?1017591 - http://secunia.com/advisories/24065 - http://secunia.com/advisori
sories/24463 - http://securitytracker.com/id?1017591 - http://secunia.com/advisories/24065 - http://secunia.com/advisories/24013 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10244 - http://www.mandriva.com/security/advisories?name=MDKSA-2007:031 - http://www.vupen.com/english/advisories/2007/0505 - http://www.securityfocus.com/bid/22428 - http://secunia.com/advisories/24442
CVE ID: CVE-2007-0538 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to (1) a large file, which triggers a long download session without a timeout constraint; or (2) a file with a binary content type, which is downloaded even though it cannot contain usable pingback data. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2211 - http://osvdb.org/33583 -
st Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2211 - http://osvdb.org/33583 - http://osvdb.org/33584 - http://www.securityfocus.com/archive/1/457996/100/0/threaded - http://www.securityfocus.com/archive/1/457999/100/0/threaded
CVE ID: CVE-2007-0539 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a large file, which triggers a long download session without a timeout constraint. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458003/100/0/threaded - http://www.securityfocus.com/archive/1/457996/100/0/threaded - http://securityreason.com/securityalert/2191
CVE ID: CVE-2007-0540 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source URI that corresponds to a file with a binary content type, which is downloaded even though it cannot contain usable pingback data. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/30013 - http://www.securityfocus.com/archive/1/458003/100/0/threaded - http://www.debian.org/security/2008/dsa-1564 - http://www.securityfocus.com/archive/1/457996/100/
58003/100/0/threaded - http://www.debian.org/security/2008/dsa-1564 - http://www.securityfocus.com/archive/1/457996/100/0/threaded - http://securityreason.com/securityalert/2191
CVE ID: CVE-2007-0541 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain files, via pingback service calls with a source URI that corresponds to a local pathname, which triggers different fault codes for existing and non-existing files, and in certain configurations causes a brief file excerpt to be published as a blog comment. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458003/100/0/threaded - http://www.securityfocus.com
ram Container: References: - http://www.securityfocus.com/archive/1/458003/100/0/threaded - http://www.securityfocus.com/archive/1/457996/100/0/threaded - http://securityreason.com/securityalert/2191
CVE ID: CVE-2007-0542 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.565Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script or HTML via the user parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457660/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/31663 - http://securityreason.com/securityalert/2190
CVE ID: CVE-2007-0543 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.594Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZixForum 1.14 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for Zixforum.mdb. NOTE: a followup post suggests that this issue only occurs if the administrator does not properly follow installation directions. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/458135/100/100/threaded - http://securityreason.com/securityalert/2189 - http
: - http://www.securityfocus.com/archive/1/458135/100/100/threaded - http://securityreason.com/securityalert/2189 - http://www.securityfocus.com/archive/1/457950/100/0/threaded
CVE ID: CVE-2007-0544 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.529Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users to inject arbitrary web script or HTML via the Subject field, a different vector than CVE-2006-2949. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/31740 - http://osvdb.org/32967 - http://www.securityfocus.com/bid/22205 - http://secunia.com/advisories/23934 - http://www.securityfocus.com/archive/1/457929/100/0/threaded - http://secunia.com
http://secunia.com/advisories/23934 - http://www.securityfocus.com/archive/1/457929/100/0/threaded - http://secunia.com/advisories/28837
CVE ID: CVE-2007-0545 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.527Z Vendors: n/a Products: n/a Problem Types: n/a Description: Maxtricity Tagger 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for tagger.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://securityreason.com/securityalert/2214 - http://osvdb.org/33577 - http://www.securityfocus.com/archive/1/457953/100/0/threaded
CVE ID: CVE-2007-0546 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db.mdb. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/457931/100/0/threaded - http://osvdb.org/33576 - http://securityreason.com/securityalert/2213
CVE ID: CVE-2007-0547 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in CGI-RESCUE WebFORM 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/jp/JVN%2305123538/index.html - http://secunia.com/advisories/23913 - http://www.vupen.com/english/advisories/2007/0344 - http://osvdb.org/32964
CVE ID: CVE-2007-0548 State: PUBLISHED Published: 2007-01-29T17:00:00 Last Updated: 2024-08-07T12:19:30.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number of requests for nonexistent objects. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/31623 - https://www.exploit-db.com/exploits/3182 - https://exchange.xforce.ibmcloud.com/vulnerabilities/31690 - http://secunia.com/advisories/23901