CVE-2023-28682

Jenkins Performance Publisher Plugin 8.09 and earlier does not configure its XML parser to prevent XML external entity XXE attacks...

PT-2023-21901 · Jenkins · Jenkins Performance Publisher Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Performance Publisher Plugin versions 8.09 and earlier Description: The issue is related to the XML parser not being configured to prevent XML external entity XXE attacks. This allows attackers who can control PerfPublisher report fil...

OpenConnect Buffer Overflow Vulnerability

OpenConnect is an open source application for connecting to virtual private networks. A buffer overflow vulnerability exists in OpenConnect version 8.09. An attacker can exploit this vulnerability to cause a denial of service application crash by sending specially crafted certificate data to...

DEBIAN-CVE-2020-12823

OpenConnect 8.09 has a buffer overflow, causing a denial of service application crash or possibly unspecified other impact, via crafted certificate data to getcertname in gnutls.c...