7 results · Feed
-
Critical 9.8
A type confusion vulnerability exists in the lasso_node_impl_init_from_xml functionality of Entr'ouvert Lasso 2.5.1…
-
High 7.5
A denial of service vulnerability exists in the lasso_provider_verify_saml_signature functionality of Entr'ouvert L…
-
High 7.5
A denial of service vulnerability exists in the lasso_node_init_from_message_with_format functionality of Entr'ouve…
-
High 7.5
A denial of service vulnerability exists in the g_assert_not_reached functionality of Entr'ouvert Lasso 2.5.1 and 2…
-
Unscored —
Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.
-
Unscored —
The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd al…
-
Unscored —
Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSA_verify function, which allows rem…