# CVEs published 2019-12-15

10 CVEs were published on December 15, 2019: 0 critical, 0 high. Days are UTC.

- [CVE-2019-19807](https://cve.now/CVE-2019-19807.md): In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CID-e7af6307a8a5. (no CVSS)
- [CVE-2014-8650](https://cve.now/CVE-2014-8650.md): python-requests-Kerberos through 0.5 does not handle mutual authentication (no CVSS, requests-kerberos)
- [CVE-2014-8561](https://cve.now/CVE-2014-8561.md): imagemagick 6.8.9.6 has remote DOS via infinite loop (no CVSS)
- [CVE-2014-4913](https://cve.now/CVE-2014-4913.md): ZF2014-03 has a potential cross site scripting vector in multiple view helpers (no CVSS, zendframework)
- [CVE-2014-3701](https://cve.now/CVE-2014-3701.md): eDeploy has tmp file race condition flaws (no CVSS, eDeploy)
- [CVE-2014-3699](https://cve.now/CVE-2014-3699.md): eDeploy has RCE via cPickle deserialization of untrusted data (no CVSS, eDeploy)
- [CVE-2014-3652](https://cve.now/CVE-2014-3652.md): JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL. (no CVSS, JBoss KeyCloak · org.keycloak:keycloak-services)
- [CVE-2014-3643](https://cve.now/CVE-2014-3643.md): jersey: XXE via parameter entities not disabled by the jersey SAX parser (no CVSS, jersey · com.sun.jersey:jersey-core)
- [CVE-2014-3536](https://cve.now/CVE-2014-3536.md): CFME (CloudForms Management Engine) 5: RHN account information is logged to top\_output.log during registration (no CVSS, CFME)
- [CVE-2019-19797](https://cve.now/CVE-2019-19797.md): read\_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2019-12-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.