EUVD-2025-23311

Malicious code in bioql PyPI...

EUVD-2025-21700

Malicious code in bioql PyPI...

EUVD-2025-23302

Malicious code in bioql PyPI...

CVE-2025-37108

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37109

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37108

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37109

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37109 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37109

CVE-2025-37109 describes a cross-site scripting vulnerability in the HPE Telco Service Activator product. The NVD entry lists a LOW base score (CVSS 3.1: 3.5, vectors: AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) with a network attack vector, requiring user interaction for exploitation and a partial impa...

CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37108 HPE Telco Service Activator, Protection Mechanism Failure

Cross-site scripting vulnerability has been identified in HPE Telco Service Activator product...

CVE-2025-37108

CVE-2025-37108 describes a Cross-site scripting vulnerability in HPE Telco Service Activator. Affected component: HPE Telco Service Activator (web interface). Underlying cause: cross-site scripting vulnerability as indicated by multiple sources; exact code path not detailed in the provided docs. ...

HPE Telco Service Activator 安全漏洞

HPE Telco Service Activator is a workflow automation platform that enables automated service turn-up from HPE America. A security vulnerability exists in HPE Telco Service Activator that stems from vulnerability to cross-site scripting attacks...

PT-2025-31576 · Hewlett Packard · Hpe Telco Service Activator

Name of the Vulnerable Software and Affected Versions: HPE Telco Service Activator affected versions not specified Description: A cross-site scripting issue exists in the HPE Telco Service Activator product. Recommendations: At the moment, there is no information about a newer version that contai...

PT-2025-31575 · Hewlett Packard · Hpe Telco Service Activator

Name of the Vulnerable Software and Affected Versions: HPE Telco Service Activator affected versions not specified Description: A cross-site scripting issue has been reported in the HPE Telco Service Activator product. Recommendations: At the moment, there is no information about a newer version...

CVE-2025-37104

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...

CVE-2025-37104

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...

CVE-2025-37104 HPE Telco Service Orchestrator Software, Authenticated SQL Injection

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...

CVE-2025-37104 HPE Telco Service Orchestrator Software, Authenticated SQL Injection

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...