CVE-2025-29897
A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acco
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
—
0-100
Published: Oct 15, 2026 · Last modified: Oct 15, 2026 · CWE-120 · CWE-121
Not enough EPSS history yet.
A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 and later
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-766637.5 HIG—
———A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.6hCVE-2026-766625.9 MED—
———A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.6hCVE-2026-737997.5 HIG—
———A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruption7hCVE-2026-09937.5 HIG—
——0SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP server's multipart/form-data boundary parser to cause the device to become fully unresponsive — dropping all management access and traffic forwarding during its self-recovery cycle.8hCVE-2026-1106956.3 MED—
——0A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.11hCVE-2026-1019839.8 CRI—
——0A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause remote code execution and denial of service via a J-Web virtual-domain configured.5h