19 matches found
CVE-2026-82605
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
CVE-2026-82604
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...
EUVD-2026-68323
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
CVE-2026-82605 BareBones BBEdit Lasso Language Tokenizer infinite loop
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
CVE-2026-82605
CVE-2026-82605 affects BareBones BBEdit versions up to 15.5.5 , specifically the Lasso Language Tokenizer component. The vulnerability causes an infinite loop when processing crafted Lasso language input, leading to a denial-of-service condition. The attack can be executed remotely but requires u...
CVE-2026-82605 BareBones BBEdit Lasso Language Tokenizer infinite loop
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
CVE-2026-82604 BareBones BBEdit Java Language recursion
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...
EUVD-2026-68313
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...
CVE-2026-82604 BareBones BBEdit Java Language recursion
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...
CVE-2026-82604
A vulnerability in BareBones BBEdit (versions up to 15.5.5 ) in the Java Language Module allows uncontrolled recursion , leading to a potential denial-of-service (low availability impact). The flaw is remotely exploitable with user interaction required and no privileges needed, yielding a CVSS 3....
CVE-2026-82605: Loop with Unreachable Exit Condition
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
PT-2026-83680
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
CVE-2026-82604: Uncontrolled Recursion
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...
PT-2026-83675
A flaw has been found in BareBones BBEdit up to 15.5.5. Impacted is an unknown function of the component Java Language Module. This manipulation causes uncontrolled recursion. Remote exploitation of the attack is possible. Upgrading to version 16.0 is recommended to address this issue. You should...
多个Bare Bones软件产品软件升级机制校验漏洞
CVE ID:CVE-2013-3667 Bare Bones Software是一家开发Apple Mac平台上软件工具的公司。 Bare Bones Software Yojimbo 4.0之前版本, TextWrangler 4.5.3之前版本, 和BBEdit 10.5.5之前版本中所使用的软件升级机制在安装软件之前不正确下载和校验升级，允许攻击者利用漏洞更改或破坏升级内容。 0 Bare Bones Software Yojimbo Bare Bones Software TextWrangler Bare Bones Software BBEdit 厂商补丁： Bare...
Design/Logic Flaw
The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates...
CVE-2013-3667
The vulnerability (CVE-2013-3667) affects Bare Bones Software products that use their software update mechanism: Yojimbo <= 3.x? (pre‑4.0), TextWrangler <= 4.5.3, and BBEdit
CVE-2013-3667
The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates...
CVE-2013-3667: Improper Input Validation
The software update mechanism as used in Bare Bones Software Yojimbo before 4.0, TextWrangler before 4.5.3, and BBEdit before 10.5.5 does not properly download and verify updates before installation, which allows attackers to perform "tampering or corruption" of the updates...