388 matches found
CVE-2026-82605
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
EUVD-2026-68323
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
CVE-2026-82605
CVE-2026-82605 affects BareBones BBEdit versions up to 15.5.5 , specifically the Lasso Language Tokenizer component. The vulnerability causes an infinite loop when processing crafted Lasso language input, leading to a denial-of-service condition. The attack can be executed remotely but requires u...
CVE-2026-82605 BareBones BBEdit Lasso Language Tokenizer infinite loop
A vulnerability has been found in BareBones BBEdit up to 15.5.5. The affected element is an unknown function of the component Lasso Language Tokenizer. Such manipulation leads to infinite loop. The attack can be executed remotely. Upgrading to version 16.0 is sufficient to fix this issue. The...
Astra Linux – Vulnerability in Lasso
There is a denial-of-service vulnerability in the lassoproviderverifysamlsignature functionality of Entr’ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial-of-service attack. An attacker can send a malformed SAML response to exploit this vulnerability...
CVE-2026-28156
Subscriber SQL Injection in Do Lasso = 358 versions...
CVE-2026-28157
Subscriber Path Traversal in Do Lasso = 358 versions...
CVE-2026-28155
Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...
CVE-2026-28158
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
CVE-2026-28157
CVE-2026-28157 is a path traversal vulnerability in the WordPress Do Lasso plugin, affecting versions
CVE-2026-28158
CVE-2026-28158 concerns unauthenticated XSS in the WordPress Do Lasso plugin versions
CVE-2026-28158
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
CVE-2026-28157
Subscriber Path Traversal in Do Lasso = 358 versions...
CVE-2026-28158 WordPress Do Lasso plugin <= 358 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
EUVD-2026-57950
Subscriber Path Traversal in Do Lasso = 358 versions...
EUVD-2026-57951
Unauthenticated Cross Site Scripting XSS in Do Lasso = 358 versions...
CVE-2026-28157 WordPress Do Lasso plugin <= 358 - Path Traversal vulnerability
Subscriber Path Traversal in Do Lasso = 358 versions...
EUVD-2026-57948
Unauthenticated Insecure Direct Object References IDOR in Do Lasso = 358 versions...