Archive

15 December 2019

Vulnerabilities first published on this day (UTC), newest first.

← November 2019 2019 / December /15 January 2020 →

All Critical High Medium Low Exploited only Public exploit

10 results · Feed

Unscored —

CVE-2019-19807

In the Linux kernel before 5.3.11, sound/core/timer.c has a use-after-free caused by erroneous code refactoring, aka CI…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 15, 2019
Critical 9.8

CVE-2014-8650

Improper Authentication in requests-kerberos

python-requests-Kerberos through 0.5 does not handle mutual authentication

requests-kerberos python-requests-kerberos Debian PyPI

Dec 15, 2019
Unscored —

CVE-2014-8561

imagemagick 6.8.9.6 has remote DOS via infinite loop

imagemagick Debian

Dec 15, 2019
Unscored —

CVE-2014-4913

ZF2014-03 has a potential cross site scripting vector in multiple view helpers

zendframework zendframework

Dec 15, 2019
Unscored —

CVE-2014-3701

eDeploy has tmp file race condition flaws

eDeploy eDeploy

Dec 15, 2019
Unscored —

CVE-2014-3699

eDeploy has RCE via cPickle deserialization of untrusted data

eDeploy eDeploy

Dec 15, 2019
Medium 6.1

CVE-2014-3652

JBoss KeyCloak Open Redirect

JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL.

JBoss KeyCloak JBoss KeyCloak org.keycloak:keycloak-services Maven

Dec 15, 2019
High 8.1

CVE-2014-3643

jersey: XXE via parameter entities

jersey: XXE via parameter entities not disabled by the jersey SAX parser

jersey jersey com.sun.jersey:jersey-core Maven

Dec 15, 2019
Unscored —

CVE-2014-3536

CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration

CFME (CloudForms Management Engine) CFME (CloudForms Management Engine)

Dec 15, 2019
Unscored —

CVE-2019-19797

read_colordef in read.c in Xfig fig2dev 3.2.7b has an out-of-bounds write.

fig2dev fig2dev Debian Ubuntu

Dec 15, 2019