CVE-2025-47151

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...

CVE-2025-47151

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...

CVE-2025-46404

A denial of service vulnerability exists in the lassoproviderverifysamlsignature functionality of Entr'ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial of service. An attacker can send a malformed SAML response to trigger this vulnerability...

CVE-2025-47151

A type confusion vulnerability exists in the lassonodeimplinitfromxml functionality of Entr'ouvert Lasso 2.5.1 and 2.8.2. A specially crafted SAML response can lead to an arbitrary code execution. An attacker can send a malformed SAML response to trigger this vulnerability...

CVE-2025-47151

CVE-2025-47151 is a type confusion vulnerability in Entr'ouvert Lasso (lasso_node_impl_init_from_xml) that can allow arbitrary code execution via a crafted SAML response. Affected versions include Lasso 2.5.1 and 2.8.2, with exploitation via network input that does not require user interaction. T...

CVE-2018-13735

The CVE-2018-13735 entry concerns a vulnerability in an Ethereum token contract: the mintToken function of the EnterToken contract (ENTER/ENTR) has an integer overflow that allows the contract owner to set the balance of an arbitrary user to any value. The vulnerability location is the mintToken ...

CVE-2018-13231

The CVE-2018-13231 entry concerns EnterToken (EnterToken ETHERC20-like token) where the sell function in its smart contract has an integer overflow vulnerability: the product of amount and sellPrice can evaluate to zero, potentially reducing a seller’s assets. Documents consistently identify Ente...

CVE-2018-13232

The CVE-2018-13232 entry concerns the EnterCoin Ethereum token (ENTER) and its sell function. The vulnerability is an integer overflow where amount * sellPrice can evaluate to zero, potentially reducing a seller’s assets. Documented in the NVD description, it ties to a smart contract integer over...