CVE-2023-45606

Cross-Site Request Forgery CSRF vulnerability in Lasso Simple URLs plugin = 120 versions...

CVE-2023-40674

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Lasso Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management allows Stored XSS.This issue affects Simple URLs – Link Cloaking, Product Displays, and Affiliate Link Management:...

CVE-2023-40667

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Lasso Simple URLs plugin = 117 versions...

CLSA-2025-1765478656 lasso: Fix of CVE-2025-47151

CVE-2025-47151: fix type confusion vulnerability in the lassonodeimplinitfromxml functionality...

Oracle Linux 7 : lasso (ELSA-2025-21404)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21404 advisory. 2.5.1-8.0.1 - Fixes CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso Orabug: 38658691 Tenable has extracted the preceding description block directly...

SUSE: Security Advisory (SUSE-SU-2025:21140-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lasso security update

2.5.1-8.0.1 - Fixes CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso Orabug: 38658691...

Debian: Security Advisory (DLA-4397-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 4397-1] lasso security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4397-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler December 08, 2025 https://wiki.debian.org/LTS -...

DLA-4397-1 lasso - security update

Bulletin has no description...

Debian dla-4397 : liblasso-perl - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4397 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4397-1 [email protected]...

CLSA-2025-1764677738 lasso: Fix of CVE-2025-47151

CVE-2025-47151: fix type confusion vulnerability in the lassonodeimplinitfromxml functionality...

openSUSE 16 Security Update : lasso (openSUSE-SU-2025-20083-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2025-20083-1 advisory. - CVE-2025-46404: specially crafted SAML response can lead to a denial of service bsc1253092. - CVE-2025-46705: specially crafted SAML assertion...

Dell ControlVault, Lasso, GL.iNet vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Dell ControlVault 3 firmware and its associated Windows software, four vulnerabilities in Entr'ouvert Lasso, and one vulnerability in GL.iNet Slate AX. The vulnerabilities mentioned in this blog post...

Oracle Linux 9 : lasso (ELSA-2025-21462)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-21462 advisory. - 2.7.0-11.3 - Fix CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso Resolves: RHEL-126684 Tenable has extracted the preceding description block direct...

OPENSUSE-SU-2025:20083-1 Security update for lasso

This update for lasso fixes the following issues: - CVE-2025-46404: specially crafted SAML response can lead to a denial of service bsc1253092. - CVE-2025-46705: specially crafted SAML assertion response can lead to a denial of service bsc1253093. - CVE-2025-47151: type confusion vulnerability...

lasso security update

2.7.0-11.3 - Fix CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso Resolves: RHEL-126684...

Alibaba Cloud Linux 3 : 0183: lasso (ALINUX3-SA-2025:0183)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0183 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-47151: A type confusion vulnerability exis...

RockyLinux 9 : lasso (RLSA-2025:21462)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:21462 advisory. lasso: Type confusion in Entr'ouvert Lasso CVE-2025-47151 Tenable has extracted the preceding description block directly from the RockyLinux security advisory...

lasso security update

An update is available for lasso. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The lasso packages provide the Lasso library that implements the Liberty Allian...