CVEs published March 13, 2019
31 CVEs were published on March 13, 2019: 1 critical, 3 high.
- Published
- 31
- Critical
- 1
- High
- 3
- Medium
- 3
- Low
- 0
- Unrated
- 24
- Now in CISA KEV
- 0
- Fix available
- 6
Most affected products
- F5 Networks BIG-IP
- 3
- Dell RSA Archer
- 2
- F5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS…
- 2
- Cisco Common Services Platform Collector Software
- 1
- Cisco Small Business SPA500 Series IP Phones
- 1
- Cloud Foundry CAPI
- 1
- Dell RSA Authentication Manager
- 1
- editor.md
- 1
- F5 Networks BIG-IP APM; Enterprise Manager
- 1
- ICS-CERT gpsd and microjson
- 1
Critical 1
High 3
Medium, low and unrated 27
- CVE-2018-20800An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13.
- CVE-2019-3711DSA-2019-038: RSA® Authentication Manager Insecure Credential Management VulnerabilityDell RSA Authentication Manager
- CVE-2019-3785Cloud Controller provides signed URL with write authorization to read only userCloud Foundry CAPI
- CVE-2019-6596In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messaF5 Networks BIG-IP
- CVE-2019-6597In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, when authenticated administrativeF5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS…
- CVE-2019-6598In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed requesF5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS…
- CVE-2019-6599In BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of values in an undisclosed page of the configuraF5 Networks BIG-IP APM; Enterprise Manager
- CVE-2019-6600In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for adF5 Networks BIG-IP
- CVE-2019-6601In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in procesF5 Networks BIG-IP
- CVE-2019-9751An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5.
- CVE-2019-9752An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4.
- CVE-2019-9754An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27.
- CVE-2019-9747In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query.
- CVE-2019-9748In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes f
- CVE-2019-9749An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4.
- CVE-2019-9750In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing
- CVE-2018-17937gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow rICS-CERT gpsd and microjson
- CVE-2015-2254Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading informa
- CVE-2019-9746In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger
- CVE-2019-9742gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FI
- CVE-2018-20621An issue was discovered in Microvirt MEmu 6.0.6.
- CVE-2019-9741An issue was discovered in net/http in Go 1.11.5.
- CVE-2019-9740An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.
- CVE-2019-9735An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.xneutron
- CVE-2019-9736DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.
- CVE-2019-9737Editor.md 1.5.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.editor.md
- CVE-2019-9738jimmykuu Gopher 2.0 has DOM-based XSS via vectors involving the '<EMBED SRC="data:image/svg+xml' substring.