# CVEs published 2019-03-13 31 CVEs were published on March 13, 2019: 1 critical, 3 high. Days are UTC. - [CVE-2018-20800](https://cve.now/CVE-2018-20800.md): An issue was discovered in Open Ticket Request System (OTRS) 5.0.31 and 6.0.13. (no CVSS) - [CVE-2019-3711](https://cve.now/CVE-2019-3711.md): DSA-2019-038: RSA® Authentication Manager Insecure Credential Management Vulnerability (CVSS 5.8, Dell RSA Authentication Manager) - [CVE-2019-3715](https://cve.now/CVE-2019-3715.md): Information Exposure Vulnerability (CVSS 7.8, Dell RSA Archer) - [CVE-2019-3716](https://cve.now/CVE-2019-3716.md): Information Exposure Vulnerability (CVSS 7.8, Dell RSA Archer) - [CVE-2019-3785](https://cve.now/CVE-2019-3785.md): Cloud Controller provides signed URL with write authorization to read only user (CVSS 6.5, Cloud Foundry CAPI) - [CVE-2019-6596](https://cve.now/CVE-2019-6596.md): In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.1, 12.1.0-12.1.3.6, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when processing fragmented ClientHello messa (no CVSS, F5 Networks BIG-IP) - [CVE-2019-6597](https://cve.now/CVE-2019-6597.md): In BIG-IP 13.0.0-13.1.1.1, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, when authenticated administrative (no CVSS, F5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS…) - [CVE-2019-6598](https://cve.now/CVE-2019-6598.md): In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.0.7, 12.1.0-12.1.3.5, 11.6.1-11.6.3.2, or 11.5.1-11.5.8 or Enterprise Manager 3.1.1, malformed reques (no CVSS, F5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS…) - [CVE-2019-6599](https://cve.now/CVE-2019-6599.md): In BIG-IP 11.6.1-11.6.3.2 or 11.5.1-11.5.8, or Enterprise Manager 3.1.1, improper escaping of values in an undisclosed page of the configura (no CVSS, F5 Networks BIG-IP APM; Enterprise Manager) - [CVE-2019-6600](https://cve.now/CVE-2019-6600.md): In BIG-IP 14.0.0-14.0.0.2, 13.0.0-13.1.1.3, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, when remote authentication is enabled for ad (no CVSS, F5 Networks BIG-IP) - [CVE-2019-6601](https://cve.now/CVE-2019-6601.md): In BIG-IP 13.0.0, 12.1.0-12.1.3.7, 11.6.1-11.6.3.2, or 11.5.1-11.5.8, the Application Acceleration Manager (AAM) wamd process used in proces (no CVSS, F5 Networks BIG-IP) - [CVE-2019-9751](https://cve.now/CVE-2019-9751.md): An issue was discovered in Open Ticket Request System (OTRS) 6.x before 6.0.17 and 7.x before 7.0.5. (no CVSS) - [CVE-2019-9752](https://cve.now/CVE-2019-9752.md): An issue was discovered in Open Ticket Request System (OTRS) 5.x before 5.0.34, 6.x before 6.0.16, and 7.x before 7.0.4. (no CVSS) - [CVE-2019-9754](https://cve.now/CVE-2019-9754.md): An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. (no CVSS) - [CVE-2018-0389](https://cve.now/CVE-2018-0389.md): Cisco Small Business SPA514G IP Phones SIP Denial of Service Vulnerability (CVSS 7.5, Cisco Small Business SPA500 Series IP Phones) - [CVE-2019-1723](https://cve.now/CVE-2019-1723.md): Cisco Common Services Platform Collector Static Credential Vulnerability (CVSS 9.8, Cisco Common Services Platform Collector Software) - [CVE-2019-9747](https://cve.now/CVE-2019-9747.md): In tinysvcmdns through 2018-01-16, a maliciously crafted mDNS (Multicast DNS) packet triggers an infinite loop while parsing an mDNS query. (no CVSS) - [CVE-2019-9748](https://cve.now/CVE-2019-9748.md): In tinysvcmdns through 2018-01-16, an mDNS server processing a crafted packet can perform arbitrary data read operations up to 16383 bytes f (no CVSS) - [CVE-2019-9749](https://cve.now/CVE-2019-9749.md): An issue was discovered in the MQTT input plugin in Fluent Bit through 1.0.4. (no CVSS) - [CVE-2019-9750](https://cve.now/CVE-2019-9750.md): In IoTivity through 1.3.1, the CoAP server interface can be used for Distributed Denial of Service attacks using source IP address spoofing (no CVSS) - [CVE-2018-17937](https://cve.now/CVE-2018-17937.md): gpsd versions 2.90 to 3.17 and microjson versions 1.0 to 1.3, an open source project, allow a stack-based buffer overflow, which may allow r (no CVSS, ICS-CERT gpsd and microjson) - [CVE-2015-2254](https://cve.now/CVE-2015-2254.md): Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to capture and change patch loading informa (no CVSS) - [CVE-2019-9746](https://cve.now/CVE-2019-9746.md): In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm\_info.cc will trigger (no CVSS) - [CVE-2019-9742](https://cve.now/CVE-2019-9742.md): gdwfpcd.sys in G Data Total Security before 2019-02-22 allows an attacker to bypass ACLs because Interpreted Device Characteristics lacks FI (no CVSS) - [CVE-2018-20621](https://cve.now/CVE-2018-20621.md): An issue was discovered in Microvirt MEmu 6.0.6. (no CVSS) - [CVE-2019-9741](https://cve.now/CVE-2019-9741.md): An issue was discovered in net/http in Go 1.11.5. (no CVSS) - [CVE-2019-9740](https://cve.now/CVE-2019-9740.md): An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. (CVSS 6.5) - [CVE-2019-9735](https://cve.now/CVE-2019-9735.md): An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x (no CVSS, neutron) - [CVE-2019-9736](https://cve.now/CVE-2019-9736.md): DOM-based XSS exists in 1024Tools Markdown 1.0 via vectors involving the '\