CVEs published November 29, 2006
9 CVEs were published on November 29, 2006: 0 critical, 1 high.
- Published
- 9
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 0
High 1
Medium, low and unrated 8
- CVE-2006-6169Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running interactively, might all
- CVE-2006-4099Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of
- CVE-2006-6166Cross-site scripting (XSS) vulnerability in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JCE) 1.0.4 for Joomla!
- CVE-2006-6167Multiple PHP remote file inclusion vulnerabilities in L.
- CVE-2006-6168tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors such as a comma-separa
- CVE-2006-6162Cross-site scripting (XSS) vulnerability in tiki-edit_structures.php in TikiWiki 1.9.6 allows remote attackers to inject arbitrary web scrip
- CVE-2006-6163Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki before 1.9.7 allows remote attackers to inject arbitrary JavaScr
- CVE-2006-6164The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly remove duplicate environment variables, whic