# CVEs published 2006-12-22

3 CVEs were published on December 22, 2006: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6698](https://cve.now/CVE-2006-6698.md): The GConf daemon (gconfd) in GConf 2.14.0 creates temporary files under directories with names based on the username, even when GCONF\_GLOBAL (no CVSS)
- [CVE-2006-6696](https://cve.now/CVE-2006-6696.md): Double free vulnerability in Microsoft Windows 2000, XP, 2003, and Vista allows local users to gain privileges by calling the MessageBox fun (no CVSS)
- [CVE-2006-6697](https://cve.now/CVE-2006-6697.md): CRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier, including 9.0.2, allows remote attackers to inject (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2006-12-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.