UBUNTU-CVE-2024-28820

Buffer overflow in the extractopenvpncr function in openvpn-cr.c in openvpn-auth-ldap aka the Three Rings Auth-LDAP plugin for OpenVPN 2.0.4 allows attackers with a valid LDAP username and who can control the challenge/response password field to pass a string with more than 14 colons into this...

Grafana Authentication Bypass Vulnerability

Grafana is an open source, feature-rich metrics dashboard and graphical editor supporting Graphite, Elasticsearch, OpenTSDB, Prometheus, and InfluxDB. Grafana suffers from an authentication bypass vulnerability. The vulnerability stems from the fact that an attacker can generate a valid 'remember...