CVE-2018-19827

🗓️ 14 May 2019 12:26:32Reported by redhat.comType

redhatcve🔗 access.redhat.com👁 41 Views

Type confusion flaw in libsas

Reporter	Title	Published	Views	Family All 54
IBM Security Bulletins	Security Bulletin: IBM Security Verify Information Queue uses a Node.js package with multiple vulnerabilities	10 Feb 202116:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System.	16 Aug 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties in Open Source packages affects IBM Watson Machine Learning Accelerator on Cloud Pak for Data	6 Dec 202316:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	30 Mar 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: OSS security Scan issues for Concerto installer.	8 Dec 202006:37	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202317:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vunerable to libsass and node-sass vulnerabilities	6 Dec 202316:20	–	ibm
IBM Security Bulletins	Security Bulletin: Medium/low severity vulnerabilities in libraries used by IBM Spectrum Discover (libraries of libraries)	27 Apr 202222:51	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Security issues for NPS console.	15 Dec 202007:03	–	ibm

Source	Link
cve	www.cve.org/CVERecord
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

06 Apr 2023 04:27Current

2.8Low risk

Vulners AI Score2.8

CVSS 26.8

CVSS 38.8

EPSS0.02044

type confusion libsass expand operator arbitrary code