Поиск уязвимостей
Количество 34
Количество 34
CVE-2025-46784
A denial of service vulnerability exists in the lasso_node_init_from_m ...
CVE-2025-47151
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.
CVE-2025-47151
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.
CVE-2025-47151
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.
CVE-2025-47151
A type confusion vulnerability exists in the lasso_node_impl_init_from ...
GHSA-4p4q-6835-5w79
A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability.
BDU:2026-12825
Уязвимость функционала lasso_node_init_from_message_with_format библиотеки Lasso, связанная с неправильным освобождением памяти перед удалением последней ссылки, позволяющая нарушителю вызвать отказ в обслуживании
RLSA-2025:21628
Critical: lasso security update
RLSA-2025:21462
Critical: lasso security update
GHSA-j9px-r24r-fm3p
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability.
ELSA-2025-21628
ELSA-2025-21628: lasso security update (CRITICAL)
ELSA-2025-21462
ELSA-2025-21462: lasso security update (CRITICAL)
ELSA-2025-21404
ELSA-2025-21404: lasso security update (CRITICAL)
BDU:2026-05074
Уязвимость функции lasso_node_impl_init_from_xml() библиотеки Lasso, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| CVE-2025-46784 A denial of service vulnerability exists in the lasso_node_init_from_m ... | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | CVE-2025-47151 A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability. | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
 | CVE-2025-47151 A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability. | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
 | CVE-2025-47151 A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability. | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| CVE-2025-47151 A type confusion vulnerability exists in the lasso_node_impl_init_from ... | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| GHSA-4p4q-6835-5w79 A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a memory depletion, resulting in denial of service. An attacker can send a malformed SAML response to trigger this vulnerability. | CVSS3: 9.6 | 1% Низкий | около 1 года назад |
 | BDU:2026-12825 Уязвимость функционала lasso_node_init_from_message_with_format библиотеки Lasso, связанная с неправильным освобождением памяти перед удалением последней ссылки, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | RLSA-2025:21628 Critical: lasso security update | 1% Низкий | 12 месяцев назад | |
| RLSA-2025:21462 Critical: lasso security update | 1% Низкий | 12 месяцев назад | |
| GHSA-j9px-r24r-fm3p A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability. | CVSS3: 9.6 | 1% Низкий | около 1 года назад |
| ELSA-2025-21628 ELSA-2025-21628: lasso security update (CRITICAL) | 1% Низкий | 12 месяцев назад | |
| ELSA-2025-21462 ELSA-2025-21462: lasso security update (CRITICAL) | 1% Низкий | 12 месяцев назад | |
| ELSA-2025-21404 ELSA-2025-21404: lasso security update (CRITICAL) | 1% Низкий | 11 месяцев назад | |
| BDU:2026-05074 Уязвимость функции lasso_node_impl_init_from_xml() библиотеки Lasso, позволяющая нарушителю выполнить произвольный код | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
Уязвимостей на страницу