aiosmtplib: STARTTLS response injection

ImpactWhen a connection is upgraded with STARTTLS, aiosmtplib reads the server's 220 go-ahead reply and immediately performs the TLS handshake without discarding any data still sitting in the receive buffer. Bytes the protocol read off the plaintext socket before the handshake survive across the...

PYSEC-2026-3808 asyncssh has SCP Path Traversal to Arbitrary File Write

| | | |---|---| | Product | asyncssh all versions through 2.23.0 | | Related | CVE-2019-6111 same class in OpenSSH | | Fix | AsyncSSH 2.23.1 | A malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences. The SCP...

CVE-2026-88290

GeoVision GV-LPC2211 V1.14 260903 allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources...

io.quarkiverse.artemis:quarkus-test-artemis (>=3.12.0, <=3.14.3), net.oneandone.ioc-unit:ioc-unit-jms-artemisactivemq (>=6.0.0, <=6.0.1) +35 more potentially affected by CVE-2026-49362 via org.apache.artemis:artemis-server (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-server MAVEN version =2.50.0, =3.12.0, =6.0.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.56.0 and more Source cves: CVE-2026-49362 Source advisory: SNYK:JAVA-ORGAPACHEARTEMIS-20186767...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the CORE protocol handler. An attacker can manipulate broker state and create arbitrary durable queues by sending unauthenticated requests. Remediation Upgrade...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-server is a server package for the ActiveMQ-Artemis project. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the CORE protocol handler. An attacker can manipulate broker state and create arbitrary durable...

CVE-2026-88290 GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

GeoVision GV-LPC2211 V1.14 260903 allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources...

CVE-2026-88290 GV-LPC2011/LPC2211 - Unauthenticated VLSVR Slowloris and Memory Resource Exhaustion

GeoVision GV-LPC2211 V1.14 260903 allows unauthenticated clients to declare unbounded VLSVR frame lengths and indefinitely delay blocking receives, allowing remote exhaustion of memory, connection, and worker resources...

io.quarkiverse.artemis:quarkus-test-artemis (>=3.12.0, <=3.14.3), net.oneandone.ioc-unit:ioc-unit-jms-artemisactivemq (>=6.0.0, <=6.0.1) +35 more potentially affected by CVE-2026-49364 via org.apache.artemis:artemis-server (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-server MAVEN version =2.50.0, =3.12.0, =6.0.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.56.0 and more Source cves: CVE-2026-49364 Source advisory: SNYK:JAVA-ORGAPACHEARTEMIS-20159297...

EUVD-2026-75311

GeoVision GV-LPC2211 V1.13 allows an authenticated ONVIF user to inject shell commands through ConsumerReference.Address and execute arbitrary commands as root...

CVE-2026-88271 GV-LPC2011/LPC2211 - SSVR Guest Configuration Overwrite and Administrative Credential Takeover

GeoVision GV-LPC2211 V1.13 allows a Guest user to overwrite device configuration and replace the administrator password through SSVR...

com.io7m.jsay:com.io7m.jsay (>=0.0.1, <=0.0.2), com.jkoolcloud.tnt4j.streams:tnt4j-streams-jms (>=1.14.2, <=2.3.0) +13 more potentially affected by CVE-2026-67593 via org.apache.activemq:artemis-openwire-protocol (>=1.0.0, <=2.44.0)

org.apache.activemq:artemis-openwire-protocol MAVEN version =1.0.0, =0.0.1, =1.14.2, =2.2.94, =2.2.90, =2.2.97, =2.2.97, =2.2.94, =2.2.90, =2.2.97, =2.2.94, =0.1.0, =0.1.0, =1.0.0, =2.31.1, =2.29.0, =2.44.0 Source cves: CVE-2026-67593 Source advisory: SNYK:JAVA-ORGAPACHEACTIVEMQ-20159294...

org.apache.artemis:apache-artemis (>=2.50.0, <=2.56.0), org.apache.artemis:artemis-features (>=2.50.0, <=2.56.0) +1 more potentially affected by CVE-2026-67593 via org.apache.artemis:artemis-openwire-protocol (>=2.50.0, <=2.56.0)

org.apache.artemis:artemis-openwire-protocol MAVEN version =2.50.0, =2.50.0, =2.50.0, =2.50.0, =2.56.0 Source cves: CVE-2026-67593 Source advisory: SNYK:JAVA-ORGAPACHEARTEMIS-20159292...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletion of a queue by sending a crafted command before authentication and...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-openwire-protocol is a package for activemq. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletio...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire RemoveSubscriptionInfo command in the protocol handling. An attacker can trigger unauthorized deletion of a queue by sending a crafted command before authentication and...

Missing Authentication for Critical Function

Overview org.apache.artemis:artemis-jakarta-openwire-protocol is a To support OpenWire clients from an embedded broker deployed in a Jakarta environment e.g. Spring Boot 3 Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the Openwire...

httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...

Apache HTTP Server: mod_proxy_ajp: Apache HTTP Server mod_proxy_ajp: Arbitrary code execution via heap-based buffer overflow

A flaw was found in modproxyajp of Apache HTTP Server. This heap-based buffer overflow vulnerability allows a remote attacker, by connecting to a malicious AJP Apache JServ Protocol server, to send a specially crafted message. This message can cause modproxyajp to write attacker-controlled data...

httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check

A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...