Skip to content
OpenAdvisories

Archive

29 November 2006

Vulnerabilities first published on this day (UTC), newest first.

9 results · Feed

  • Unscored —

    Heap-based buffer overflow in the ask_outfile_name function in openfile.c for GnuPG (gpg) 1.4 and 2.0, when running int…

  • Unscored —

    Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers t…

  • Unscored —

    tiki-register.php in TikiWiki before 1.9.7 allows remote attackers to trigger "notification-spam" via certain vectors s…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (A…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in jce.php in the JCE Admin Component in Ryan Demmer Joomla Content Editor (JC…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in tiki-edit_structures.php in TikiWiki 1.9.6 allows remote attackers to injec…

  • Unscored —

    The _dl_unsetenv function in loader.c in the ELF ld.so in OpenBSD 3.9 and 4.0 does not properly remove duplicate enviro…

  • High 7.8

    ld.so in FreeBSD, NetBSD, and possibly other BSD distributions does not remove certain harmful environment variables, w…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in tiki-setup_base.php in TikiWiki before 1.9.7 allows remote attackers to inj…