EUVD-2018-0864

Malware in sbrugna...

EUVD-2025-21700

Malicious code in bioql PyPI...

CVE-2025-37104

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...

CVE-2025-37104

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...

CVE-2025-37104 HPE Telco Service Orchestrator Software, Authenticated SQL Injection

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...

CVE-2025-37104 HPE Telco Service Orchestrator Software, Authenticated SQL Injection

A security vulnerability has been identified in HPE Telco Service Orchestrator software. The vulnerability could allow authenticated clients to to perform a SQL Injection attack when sending a service request, and potentially exfiltrate the database's vendor name to unauthorized authenticated...

CVE-2025-37104

The CVE concerns HPE Telco Service Orchestrator. It describes an authenticated SQL Injection vulnerability in service requests that could allow exfiltration of the database vendor name to authorized authenticated clients. Affected software is HPE Telco Service Orchestrator; the specific vulnerabl...

HPE Telco Service Orchestrator 安全漏洞

HPE Telco Service Orchestrator is a telecom service orchestrator from HPE, USA. A security vulnerability exists in HPE Telco Service Orchestrator that originates from SQL injection and could lead to the disclosure of database information...

PT-2025-29828 · Hewlett Packard · Hpe Telco Service Orchestrator

Name of the Vulnerable Software and Affected Versions: HPE Telco Service Orchestrator affected versions not specified Description: A security issue exists in HPE Telco Service Orchestrator software that could allow authenticated clients to perform a SQL Injection attack when sending a service...

Contrail Service Orchestration: hardcoded cryptographic certificates and keys

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

Hardcoded credentials

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

CVE-2018-0040

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

CVE-2018-0040 Contrail Service Orchestration: hardcoded cryptographic certificates and keys

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

CVE-2018-0040

CVE-2018-0040 affects Juniper Networks Contrail Service Orchestrator prior to 4.0.0, where hard-coded cryptographic certificates and keys are used. Root cause: the presence of hard-coded credentials may allow an attacker to gain unauthorized access to services over the network. Consequences: unau...