CVEs published December 15, 2019
10 CVEs were published on December 15, 2019: 0 critical, 0 high.
- Published
- 10
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 10
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- eDeploy
- 2
- CFME
- 1
- JBoss KeyCloak · org.keycloak:keycloak-services
- 1
- jersey · com.sun.jersey:jersey-core
- 1
- requests-kerberos
- 1
- zendframework
- 1
Medium, low and unrated 10
- CVE-2019-19807In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5.
- CVE-2014-8650python-requests-Kerberos through 0.5 does not handle mutual authenticationrequests-kerberos
- CVE-2014-8561imagemagick 6.8.9.6 has remote DOS via infinite loop
- CVE-2014-4913ZF2014-03 has a potential cross site scripting vector in multiple view helperszendframework
- CVE-2014-3701eDeploy has tmp file race condition flawseDeploy
- CVE-2014-3699eDeploy has RCE via cPickle deserialization of untrusted dataeDeploy
- CVE-2014-3652JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.JBoss KeyCloak · org.keycloak:keycloak-services
- CVE-2014-3643jersey: XXE via parameter entities not disabled by the jersey SAX parserjersey · com.sun.jersey:jersey-core
- CVE-2014-3536CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registrationCFME
- CVE-2019-19797read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.